How to fix ssl expiry on WordPress.org
Renew your TLS/SSL certificate before it expires and enable automatic renewal so your store never goes offline or shows security warnings.
Steps for WordPress.org
- SSL is managed at the server/hosting level, not inside WordPress itself.
- Log in to your hosting control panel and enable AutoSSL (cPanel) or the equivalent Let's Encrypt integration.
- Install the 'Really Simple SSL' plugin for WordPress — it checks your certificate status and forces HTTPS site-wide, and its Pro version can alert you before expiry.
- Confirm WordPress Site URL and Home URL both use 'https://' under Settings → General.
What is ssl expiry?
A TLS (SSL) certificate is the digital credential that puts the padlock in your visitors' browser bar and enables the secure "https://" connection to your store. Every certificate has an expiry date — typically 90 days (Let's Encrypt) or 1–2 years (paid CAs). When it expires, browsers immediately block visitors with a full-screen "Your connection is not private" warning, and the padlock disappears. Auto-renewal is a process (a scheduled script or a hosting feature) that requests a fresh certificate a few weeks before the old one expires, so the swap happens invisibly to shoppers.
An expired certificate is an emergency: every visitor sees a hard browser warning and most will leave instantly, causing an immediate and total loss of sales. Google also uses HTTPS as a ranking signal, so a lapsed certificate can drop your organic rankings. Payment processors and card networks require an active TLS certificate — an expired cert can cause checkout failures and put you in breach of PCI-DSS compliance. Setting up auto-renewal costs nothing and takes minutes; ignoring it risks hours or days of complete store downtime.
See the complete Ssl expiry guide for every platform and the full background.
Not sure if your WordPress.org store has this?
Run a free SEOLZ scan — we’ll find ssl expiry and every other issue across your whole site.
Scan my site free