Навчання
SSL Certificate Expiry: Check Renewal Before HTTPS Breaks
A certificate expiry date is an operational deadline. Renew early, verify the live certificate, and make sure every hostname presents the intended chain.
Запусти свіжий аудит DomainLens і використовуй звіт як список пріоритетів.
An expiry date is only the first check
A certificate checker reads the certificate currently presented by a hostname. Check its expiry, issuer, subject names and chain. Renewing a certificate in an account is not enough if the web server still presents an older file, a missing intermediate, or a certificate for another hostname.
Test both the canonical hostname and alternate www/non-www host after any TLS change. Redirects happen after a TLS handshake, so a bad certificate on the source host can stop visitors before the redirect runs.
Renew, deploy, then verify the final host
Use the SSL certificate checker to inspect the live result, the Certbot and Let’s Encrypt guide for automated renewal, and the OpenSSL CSR guide for a managed-certificate workflow.
- Set alerts well before expiry, not on the final day.
- Confirm renewal reloads the web server or proxy.
- Verify the exact public hostname from an external network.
- Keep HTTP-to-HTTPS redirects direct after certificate validation.