SSL Certificate Expiry: What Happens When It Expires
By URLWatch.io | 2026-06-01 | 8 min read
You open your website and see it: a red warning that says "NOT SECURE" next to your domain name.
Your visitors see it too.
Some click away immediately. Others email you asking if your site has been hacked. Your conversion rate drops. You panic.
Sound familiar?
This is what happens when your SSL certificate expires.
It's one of the most common—and most preventable—website disasters. Yet thousands of site owners, freelancers, and agencies miss it every month.
In this guide, you'll learn:
- What an SSL certificate is (in plain English)
- Why that "NOT SECURE" warning appears when it expires
- What it actually means for your website and business
- How to renew it before it expires
- How to never let it happen again
What Is An SSL Certificate?
An SSL (Secure Sockets Layer) certificate is a small digital file that encrypts the connection between your website visitors and your server.
Think of it like a security badge for your website.
Without it: Data travels between your visitor and your server as plain text. Anyone on the same network (coffee shops, airports, etc.) could see passwords, credit card numbers, and personal information.
With it: All communication is encrypted. Even if someone intercepts the data, they see gibberish.
Your SSL certificate proves to visitors: "Yes, I'm really who I claim to be. Your connection is secure."
That little green lock icon next to your domain name? That's your SSL certificate doing its job.
Why Do SSL Certificates Expire?
SSL certificates don't last forever. They expire—usually every 1, 2, or 3 years depending on which certificate you bought.
Why the expiration date?
Certificate authorities (the companies that issue them) built in expiration dates to:
- Force security updates - Technology changes; expired certs can't use the latest encryption standards
- Verify ownership - Every few years, they verify that you still own the domain
- Encourage best practices - Regular renewals remind site owners to update and maintain their sites
It's not a punishment. It's a built-in maintenance cycle.
The problem: Most site owners don't know when their certificate expires. So it expires, and they don't notice.
What Happens When Your SSL Certificate Expires?
The moment your SSL certificate expires, your site stops being secure—at least from the browser's perspective.
Here's the sequence:
1. Expiration Date Passes
It's 12:01 AM on the expiration date. Your SSL certificate is now invalid.
2. Browsers Show "NOT SECURE" Warning
When someone visits your site, their browser checks the SSL certificate. It's expired. The browser displays a warning:
- 🔓 "NOT SECURE"
- In some browsers: "Your connection is not private"
- Some browsers show a red warning screen and give users the option to leave
3. Visitors Leave
Most visitors don't click past that warning. They assume your site has been hacked or is unsafe.
In reality, nothing is wrong with your site. Your data is still secure. You just forgot to renew a certificate.
4. Business Impact
- 📉 Drop in traffic (some visitors bounce)
- 📧 Support emails asking if you've been hacked
- 💰 Lost sales (visitors won't enter credit cards or contact info)
- 🔍 SEO penalty (Google penalizes sites with expired SSL)
- 😟 Reputational damage (people think your site is compromised)
Why Does This Matter?
An expired SSL certificate might seem like a small technical issue. But it has real business consequences.
Real Example: The $50K Disaster
A digital agency was managing 40 client websites. One client, a SaaS company, was launching a new product on Monday morning.
Sunday night, traffic was high—early adopters testing the site.
At midnight on Sunday, the SSL certificate expired.
Monday morning: The site showed "NOT SECURE" to every visitor. 40% of traffic bounced before reaching the sign-up page.
The SaaS company lost an estimated $50,000 in first-week revenue because nobody could trust the site.
The agency's contact info was listed on the site. The SaaS company switched to a new agency.
The client relationship was worth $15,000+ per year.
The certificate renewal would have taken 10 minutes.
How To Prevent Your SSL Certificate From Expiring
Option 1: Manual Renewal (Risky)
You can manually renew your certificate. Here's how:
- Log into your hosting provider (GoDaddy, Dreamhost, etc.)
- Find your SSL certificate in your account
- Check the expiration date
- Click "Renew" about 30 days before it expires
- Pay the renewal fee (usually $15-$80/year)
- Install the renewed certificate
The problem: You have to remember to do this. Every year. Or every 2-3 years. It's easy to forget.
Option 2: Let's Encrypt (Free & Automatic)
Most modern hosting providers (including Dreamhost) offer free Let's Encrypt certificates that auto-renew.
If your host supports it:
- Ask your hosting provider to enable "Let's Encrypt" or "Free SSL"
- It automatically renews every 90 days
- You never have to think about it again
Cost: $0 Effort: 5 minutes to enable
Most modern sites use Let's Encrypt for this reason.
Option 3: Website Monitoring (Recommended)
Set up monitoring so you get alerted if your SSL certificate is about to expire.
How it works:
- A monitoring tool checks your SSL certificate every day
- It knows the exact expiration date
- When there are 30 days left, it emails you: "Your SSL expires in 30 days"
- You renew it before it expires
This is your backup plan. Even if you forget, you get reminded.
The Best Practice: Do All Three
1. Use auto-renewing certificates (Let's Encrypt or your host's auto-renew)
2. Set up monitoring alerts so you're notified 30 days before expiry
3. Add it to your calendar - manually check every 6 months
This three-layer approach means you'll never have an expired certificate.
The first two happen automatically. The third is just a reminder.
Your Certificate Expired Yesterday—What Now?
If your certificate has already expired:
- Don't panic. You haven't been hacked. Your data is fine.
- Log into your hosting account immediately
- Renew your certificate (click "Renew" button, pay the fee, confirm)
- Wait 15-30 minutes for the renewal to process
- Clear your browser cache and reload your site
- Check that the lock icon appears next to your domain
That's it. Usually fixed within 30 minutes.
Important: Some browsers cache the "NOT SECURE" warning. Visitors might need to clear their cache or use a different browser to see the updated certificate.
Never Miss an Expiring SSL Certificate Again
The best way to prevent this disaster is with automatic monitoring.
URLWatch monitors your SSL certificate and emails you 30 days before it expires—plus tracks 7 other site issues:
- ✅ SSL certificate expiry (30-day warning)
- ✅ Domain expiry (60-day warning)
- ✅ Site uptime (instant alert if down)
- ✅ Response time (performance tracking)
- ✅ robots.txt validation
- ✅ sitemap.xml checking
- ✅ Blacklist monitoring
- ✅ Server header detection
6 Monitors free. No credit card required. Alerts via email.
Quick Recap
| Problem | SSL certificate expires and site shows "NOT SECURE" |
| Cause | You forgot to renew before expiration date |
| Impact | Visitors leave, lost sales, SEO penalty |
| Solution | Use auto-renewing certs + monitoring alerts |
Your Next Step
Do this today:
- Log into your hosting account
- Find your SSL certificate
- Check the expiration date
- If it expires in the next 30 days, renew it now
- Enable auto-renewal if available
- Set up monitoring (like URLWatch) so you get alerted next time
Takes 10 minutes. Prevents a $50K disaster.