If your SSL certificate expired, visitors stop at a full-page security warning. Their browser puts it there. As a rule of thumb, that warning stands in front of the site until someone renews the certificate. An SSL certificate is, in plain terms, a digital credential. It lets a browser confirm it has reached the right site and talk to it privately. When it lapses, the fix belongs to whoever holds that credential. That’s the company that runs your site’s hosting, or the provider that issued it.

Here’s the part that costs you. The warning comes before any page of the site. A customer who came to call, book or buy is stopped at the door. Nothing moves until someone renews the certificate. And nobody at the business may know who that someone is.

SSL Certificate Expired? Here’s What Visitors Meet

Spilt Media’s post on SSL certificates explained makes the same point. When a certificate expires, visitors get a full-page security warning. It shuts off access to the site until the certificate is renewed. Your customers can’t get past the warning.

Picture where that warning sits. It lands in front of every page. So the things you want a customer to find stay out of reach: your offer, your phone number, your booking form. Anyone who arrives at your site meets it first, whatever they came for. The route to them is blocked until the certificate is renewed.

One distinction is worth drawing early. An expired certificate isn’t an expired domain registration. As a rule of thumb, those are two separate records with two separate renewals. Check both. For the domain side, Spilt Media’s post on an expired domain registration covers the ground.

Who Renews Your SSL Certificate?

Two answers cover it, as a rule of thumb. It’s the company that hosts your site, or the provider that issued the certificate. That’s a habit, not a rule from any source. Find out which one holds yours. Get the answer in writing.

Don’t lean on a reminder email to catch this for you. In Let’s Encrypt’s announcement on expiration emails, the certificate authority says it had been sending expiration notices to subscribers who gave it an address. It would end that service on June 4, 2025. One reason it gives: more and more of its subscribers have put reliable automation in place for renewal.

So if your site’s certificate comes from that authority, don’t count on an email landing in anyone’s inbox. For subscribers who want to keep getting expiry notices, the announcement recommends a third-party service. What it doesn’t say is what your host sends, or any other provider. That part you have to ask. And the answer belongs in writing with the rest.

Are SSL Certificates Expiring Sooner Than They Used To?

On the CA/Browser Forum’s ballot page, the forum describes an eventual reduction in the maximum validity period for public TLS certificates: 398 days down to 47 days. It words the schedule as proposed, starting in March 2026 and concluding in March 2029. Its results list every certificate-consumer vote as a yes and the requirements for adoption as met.

Read that as planning information, not as a promise about what any host does. The direction is shorter lifetimes. A shorter lifetime means the renewal comes around more times a year. That’s fine when software handles it. It’s a problem when the renewal rides on a person remembering. The chances to forget go up. So make a habit of asking your provider the plain version of the question: does the renewal happen on its own?

What Should You Do About an Expired SSL Certificate?

Tell whoever hosts or looks after the site. Ask them to renew or reissue the certificate. Treat these as habits, not rules handed down by Let’s Encrypt or the CA/Browser Forum.

  • Ask in writing who renews the certificate.
  • Ask whether that renewal happens automatically.
  • Ask who gets told when a renewal fails, and whether anyone at your business is on that list.
  • After the fix, open the site in a fresh browser window and confirm the warning is gone.

If you want a notice of your own, ask your provider about a third-party expiry notice. Then write the answers down, with a name attached.

Frequently Asked Questions About Expired SSL Certificates

Will I get a reminder before my certificate expires?

Don’t assume one. Let’s Encrypt’s announcement says it had been sending expiration notices to subscribers who gave it an address. It would end that service on June 4, 2025. The announcement says nothing about what other providers send. So ask yours who gets notified, and whether that address still reaches someone who works there. If you want a notice either way, ask about a third-party service.

Is an expired certificate the same as an expired domain?

As a rule of thumb, no. They’re two separate records. Each one has its own renewal. A site’s domain registration can be fine while its certificate has lapsed, or the reverse. So when your site stops working the way you expect, check both before you decide which one failed. Then ask who renews each of them.

How short will certificate lifetimes get?

The CA/Browser Forum’s ballot page describes an eventual reduction in the maximum validity period for public TLS certificates: 398 days down to 47 days. It words that schedule as proposed, starting in March 2026 and concluding in March 2029. A shorter window means the renewal comes around more times a year. Either way, the question for your provider stays the same. Is my renewal automatic?

Who is responsible for renewing my certificate?

That depends on who holds it: your host or the provider that issued it. Spilt Media’s post on SSL certificates says hosting providers can handle renewal automatically, and it tells you to verify that with your host to avoid unexpected downtime. As a habit, get the answer in writing, with a name for who hears about it when a renewal fails.

Next Steps After an SSL Certificate Expired Warning

Spilt Media’s managed WordPress hosting page lists plugin updates, core updates, security patches, malware scanning, SSL certificates, CDN configuration and database optimization among the things its team handles.

If nobody at your business can name the owner of that renewal, book a consultation with Spilt Media. The conversation is about who renews the certificate, and how your site is hosted and looked after.