How to fix ssl expiry on Shopify

Steps for Shopify

1. Shopify provisions and auto-renews TLS certificates for all custom domains automatically — no action is required from you.
2. To verify: go to Admin → Settings → Domains, click your custom domain, and confirm 'SSL certificate' shows a green checkmark and an active status.
3. If the status shows 'SSL unavailable', click 'Enable SSL' or remove and re-add the domain to trigger re-provisioning.
4. Ensure your DNS A/CNAME records still point to Shopify's servers, as a broken DNS record prevents certificate issuance.

What is ssl expiry?

A TLS (SSL) certificate is the digital credential that puts the padlock in your visitors' browser bar and enables the secure "https://" connection to your store. Every certificate has an expiry date — typically 90 days (Let's Encrypt) or 1–2 years (paid CAs). When it expires, browsers immediately block visitors with a full-screen "Your connection is not private" warning, and the padlock disappears. Auto-renewal is a process (a scheduled script or a hosting feature) that requests a fresh certificate a few weeks before the old one expires, so the swap happens invisibly to shoppers.

An expired certificate is an emergency: every visitor sees a hard browser warning and most will leave instantly, causing an immediate and total loss of sales. Google also uses HTTPS as a ranking signal, so a lapsed certificate can drop your organic rankings. Payment processors and card networks require an active TLS certificate — an expired cert can cause checkout failures and put you in breach of PCI-DSS compliance. Setting up auto-renewal costs nothing and takes minutes; ignoring it risks hours or days of complete store downtime.

See the complete Ssl expiry guide for every platform and the full background.