Why is my website not secure ssl certificate expired

Summary

This guide helps you troubleshoot and resolve: Why is my website not secure ssl certificate expired. Follow the steps below to fix the issue.

Common Causes

An SSL/TLS certificate encrypts the connection between your website and your visitors, keeping sensitive data such as login details and payment information private. When that certificate expires, web browsers display security warnings that can block access entirely and damage customer trust. For ecommerce sites, an expired certificate can stop transactions dead in their tracks, while for any small business it signals to visitors that the site is not maintained or safe to use.

Quick Fix Steps

1. Visit your website in a private or incognito browser window to confirm the security warning.
2. Check the certificate expiry date by clicking the padlock icon (or warning triangle) in the browser address bar and selecting the certificate information.
3. Log in to your domain registrar or hosting control panel where the SSL certificate was originally purchased or installed.
4. Renew or reissue the certificate, then install the new certificate files on your web server.
5. Restart your web server if required, then test the site again using HTTPS.

Detailed Instructions

Checking the certificate expiry date

1. Open Google Chrome, Microsoft Edge, or Apple Safari.
2. Navigate to your website using https:// at the start of the address.
3. Click the padlock icon in the address bar. If the certificate is expired, you may see a warning triangle or "Not secure" message instead.
4. Select Connection is secure or Certificate, then view the certificate details.
5. Locate the Valid to or Expires date. If this date has passed, the certificate needs to be renewed.

Renewing through your hosting control panel

1. Log in to your hosting control panel (for example cPanel, Plesk, or your provider's custom dashboard).
2. Navigate to the SSL/TLS, Security, or Websites & Domains section.
3. Select your domain from the list of managed sites.
4. Click Renew, Reissue, or Manage SSL depending on the interface.
5. Follow the prompts to generate a new Certificate Signing Request (CSR) if required, or select the option to auto-renew with your existing certificate authority.
6. Download the issued certificate files, typically including the .crt certificate, .key private key, and .ca-bundle intermediate certificate.
7. Upload and install the files under the same SSL/TLS management section, then click Install or Apply.

Renewing through your certificate authority

1. Log in to the account where you originally purchased the SSL certificate (for example, your domain registrar or a dedicated certificate authority).
2. Go to the SSL Certificates or My Products section.
3. Find the expired certificate and click Renew or Reissue.
4. Complete the validation process, which may involve email confirmation, DNS record changes, or uploading a verification file to your web server.
5. Once issued, download the certificate bundle and install it on your server as described above.

Troubleshooting

Certificate renewed but warning still appears

• Clear your browser cache and try again in an incognito or private window.
• Restart your web server (Apache, Nginx, or IIS) so it loads the new certificate.
• Confirm that the correct certificate is bound to your site's IP address and port 443.
• Check that you installed the full certificate chain, including intermediate certificates.

Mixed content warnings after renewal

• Ensure all internal links, images, scripts, and stylesheets use https:// instead of http://.
• Use your browser's developer tools (F12) and check the Console tab for mixed content errors.
• Update your content management system settings (for example WordPress Site URL) to use HTTPS.

Auto-renewal failed

• Verify that the email address on file with your certificate authority is current so renewal notices are received.
• Check that your domain's DNS records are correct and accessible for automated validation.
• Ensure your hosting account payment method is up to date if the certificate is billed through your provider.
• Consider enabling automatic renewal to prevent future expirations.

If you host with us, you don't need to do this yourself — just Open a Ticket and our Brisbane team will get it sorted.

Still Having Issues?