My website ssl certificate has expired how do i fix it

Summary

This guide helps you troubleshoot and resolve: My website ssl certificate has expired how do i fix it. Follow the steps below to fix the issue.

Common Causes

An SSL (Secure Sockets Layer) certificate encrypts the data exchanged between your website and its visitors. When a certificate expires, web browsers display security warnings that can scare away customers and damage your organisation's credibility. Search engines also prioritise secure HTTPS sites, meaning an expired certificate can negatively impact your search rankings. This guide explains how to identify an expired certificate, renew it, and resolve common mixed-content warnings that appear after HTTPS is enabled.

Quick Fix Steps

1. Verify that your SSL certificate has actually expired using an online SSL checker.
2. Log in to your domain registrar or hosting control panel.
3. Renew or reissue the SSL certificate for your domain.
4. Install the new certificate on your web server.
5. Force a HTTPS redirect to ensure all traffic uses the secure connection.
6. Check your site for mixed-content errors and update any insecure asset links.

Detailed Instructions

Step 1: Verify the certificate expiry date

1. Open your website in Google Chrome, Microsoft Edge, or Apple Safari.
2. Look for the warning icon in the address bar where the padlock usually appears.
3. Click the warning icon and select Connection is not secure or Certificate invalid.
4. View the certificate details and check the Valid to or Expiry date field.
5. If the date has passed, your certificate has expired and must be renewed.

Step 2: Renew the SSL certificate

1. Log in to your hosting control panel or the client area of your SSL certificate provider.
2. Navigate to the SSL/TLS, Security, or Certificates section.
3. Select the domain associated with the expired certificate.
4. Click Renew, Reissue, or Generate Certificate.
5. Complete the validation process, which may involve adding a DNS record or uploading a verification file to your web server.
6. Download the issued certificate files, typically including the .crt certificate and .key private key.

Step 3: Install the certificate on your server

1. Return to your hosting control panel's SSL/TLS section.
2. Choose the option to Install or Upload a certificate.
3. Paste the certificate code into the Certificate field and the private key into the Private Key field.
4. If provided, paste the CA Bundle or Intermediate Certificate into the relevant field.
5. Click Install Certificate or Save.
6. Restart your web server if required by your hosting environment.

Step 4: Enable HTTPS redirects

1. Access your website's root directory via FTP or your hosting control panel's File Manager.
2. Locate or create the .htaccess file if you are using an Apache server.
3. Add the following redirect rule to force all traffic to HTTPS:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

4. Save the file and refresh your website to confirm the address bar now shows https://.

Troubleshooting Mixed-Content Warnings

After installing your SSL certificate, you may see a warning that your connection is "not fully secure" even though HTTPS is active. This happens when your page loads some assets—such as images, stylesheets, or scripts—over HTTP instead of HTTPS. This is known as mixed content.

How to identify mixed-content errors

1. Open your website in Google Chrome.
2. Press F12 or Ctrl + Shift + I to open Developer Tools.
3. Click the Console tab.
4. Look for warnings marked as Mixed Content that list insecure http:// URLs.

How to fix mixed-content errors

1. Open the source code of the affected page or theme template.
2. Find any hardcoded links starting with http:// for images, CSS, or JavaScript files.
3. Change http:// to https://, or use protocol-relative URLs starting with //.
4. If you use a content management system like WordPress, go to Settings > General and ensure both the WordPress Address (URL) and Site Address (URL) start with https://.
5. Save your changes and clear your website cache.
6. Refresh the page and check the Developer Tools Console again to confirm the warnings are gone.

Preventing Future Expiry

• Set calendar reminders 30 days before your certificate is due to expire.
• Enable auto-renewal with your certificate provider if available.
• Use a free service like Let's Encrypt with automatic renewal via your hosting control panel.
• Regularly analyse your site's security status using an online SSL checker.

Still Having Issues?