An expired SSL certificate is one of the most damaging small mistakes a website owner can make: the moment the certificate lapses, visitors see a full-page "Your connection is not private" warning — and most of them leave and never come back. For a business site, that's lost trust, lost leads, and (for e-commerce) lost sales. The good news: expiry is 100% preventable with a simple check routine.
How to check your SSL certificate expiry date
- Click the padlock in your browser's address bar → "Connection is secure" → certificate details. Works in Chrome, Firefox, Safari, and Edge.
- Use an online checker — enter your domain and it returns the issuer, validity dates, and days remaining. Most checkers are free and instant.
- Ask your hosting dashboard. cPanel, Cloudflare, and most VPS panels show the cert expiry at a glance.
- Check from the command line (if you're technical):
echo | openssl s_client -servername yourdomain.com -connect yourdomain.com:443 2>/dev/null | openssl x509 -noout -dates
What actually happens when an SSL certificate expires?
- Browsers block the site with the "not private" warning — around 80% of visitors bounce immediately.
- SEO drops. Google treats the warning as a trust failure and can lower rankings for the affected pages.
- Payment and form processing can break — some processors refuse connections to sites with invalid certs.
- Email delivery can fail if the domain uses TLS for mail routing.
The certificate itself stops being "valid" the second it expires, even though the underlying encryption still technically works — browsers enforce the dates strictly.
How long do certificates last?
As of 2026, the industry standard is 90-day certificates (the old 1-year certs were phased out). That's safer for the ecosystem but means you need to renew 4x a year. Providers like Let's Encrypt and Cloudflare can auto-renew — if yours is set up manually, a calendar reminder 14 days before expiry is your safety net.
Never miss a renewal again
Two layers of protection beat one:
- Automation: enable auto-renewal in your hosting panel or DNS provider. This covers 95% of cases.
- Monitoring: track every certificate (and every other subscription — domains, SaaS tools, licenses) in one place. LicenseTracker exists exactly for this: one dashboard for all your renewals and licenses, with reminders before anything expires. It's part of Tooly Pro — a one-time-friendly subscription, no per-item fees.
An SSL expiry warning is the fastest way to lose a customer's trust — check your certificates monthly, automate renewal, and monitor everything in one list.
FAQ
How do I check if my SSL certificate is still valid?
Click the padlock in your browser, or use any free SSL checker — both show the exact expiration date.
Is an expired SSL certificate dangerous?
Not a security breach by itself, but it triggers browser warnings that destroy visitor trust, hurt SEO, and can break payments and forms.
Can I renew an expired certificate?
Yes — most providers (Let's Encrypt, Cloudflare, most hosts) let you re-issue immediately. It usually takes under 15 minutes.
How often should I check?
Monthly, plus set a reminder 14 days before each expiry. Or use a tracker like LicenseTracker to automate the reminders.