// Security
SSL Certificate Expiry: How to Monitor and Prevent Costly Outages
An expired SSL certificate takes your site offline instantly. Learn how to monitor certificate expiry, set up automated alerts, and never lose traffic to a preventable outage.
What Happens When Your SSL Certificate Expires
The moment your SSL certificate expires, every browser shows a full-screen security warning to your visitors — 'Your connection is not private'. Most users will immediately leave. Traffic drops to near zero within minutes.
Google crawler also stops indexing your site within hours of a certificate error, causing rankings to drop within days if the issue isn't resolved.
Setting Up Expiry Monitoring
- Let's Encrypt certificates: 90-day validity; auto-renewal should be configured on your server
- Commercial certificates: 1-year validity; manual renewal required 30 days before expiry
- Monitoring services: UptimeRobot, StatusCake, and Freshping all have SSL expiry monitoring in free tiers
- Alert thresholds: Set alerts at 60 days, 30 days, 14 days, and 7 days
- Wildcard certificates: Monitor the base domain; renewal covers all subdomains
Auto-Renewal Configuration
Let's Encrypt certificates should be set up with certbot and a cron job that runs renewal checks twice daily. Most modern hosting providers (Vercel, Netlify, Cloudflare) handle SSL renewal automatically — verify this is working.
For commercial certificates on dedicated servers, calendar the renewal 60 days before expiry. Create a runbook so any team member can handle the renewal, not just the person who last set it up.
What to Do If Your Certificate Has Already Expired
If your certificate has expired, treat it as a P1 incident. Renew immediately — don't wait. Use your hosting provider's control panel or certbot for Let's Encrypt. Once renewed, check Search Console for any crawl errors and submit a sitemap recrawl request.
Document the incident: When did it expire? Why wasn't monitoring in place? What's the process to prevent it? Turn this into a runbook so it never happens again.