Ssl cert expiring soon
Quick winRenew your SSL/TLS certificate before it expires to keep your store secure, trusted, and visible in search results.
What it is
An SSL/TLS certificate is the digital credential that enables the padlock icon and "https://" in your store's address bar. It proves your site is legitimate and encrypts all data — including passwords and payment details — traveling between your customers' browsers and your server. Every certificate has an expiry date, and once it lapses (or gets dangerously close to expiring), browsers display a full-page "Your connection is not private" warning that blocks visitors from reaching your store. Renewing means obtaining a fresh certificate and installing it before the old one expires.
Why it matters
An expired SSL certificate instantly kills conversions: browsers like Chrome and Firefox show a hard red-screen security warning that most shoppers will not click past, meaning your store becomes effectively unreachable. Google also treats HTTPS as a ranking signal, so a lapsed certificate can cause ranking drops and removal from Shopping feeds. Beyond lost revenue, transmitting customer data over an insecure or unverified connection is a data-protection compliance failure (GDPR, PCI-DSS, CCPA) that carries real legal and financial risk. Acting with at least 30 days' lead time ensures there is buffer for any renewal delays or propagation issues.
How to fix it
- Identify who issued your current certificate (your hosting provider, your platform, Cloudflare, Let's Encrypt, a CA like DigiCert/Sectigo) by checking your hosting control panel or running your domain through an SSL checker tool.
- Check whether auto-renewal is already configured — most modern platforms and hosts renew automatically; confirm the renewal email address on file is active and that automatic renewal has not been accidentally disabled.
- If auto-renewal is on, verify the renewal will fire before expiry (at least 14 days before) and that payment details attached to the account are current and not expired.
- If manual renewal is required, log in to your certificate issuer or hosting panel, initiate the renewal process, complete any domain-validation steps (email, DNS record, or file upload), and download/install the new certificate.
- After installation, use an SSL checker (e.g. SSL Labs, WhyNoPadlock, or your browser's padlock details) to confirm the new expiry date is at least 90 days out and the certificate chain is valid with no mixed-content warnings.
- Set a calendar reminder or monitoring alert (many free services can email you 60, 30, and 7 days before expiry) so you are never caught off-guard again.
Fix it on your platform
Pick your platform for the exact steps.
How to fix ssl cert expiring soon on Shopify
- Shopify provisions and auto-renews SSL certificates for all stores on shopify.com subdomains and connected custom domains — you do not manage this manually.
- To verify: go to Shopify Admin → Settings → Domains. Each domain shows a green 'SSL certificate active' badge when the certificate is valid.
- If a domain shows 'SSL unavailable' or 'SSL pending', click the domain name, then click 'Enable SSL' or 'Renew SSL'. Shopify will re-provision it automatically within 48 hours.
- Ensure your custom domain's DNS A-record or CNAME points correctly to Shopify's servers (as shown in Settings → Domains), because incorrect DNS prevents auto-provisioning.
- If the issue persists after 48 hours, contact Shopify Support from Admin → Help.
How to fix ssl cert expiring soon on Shopify Plus
- SSL management is identical to standard Shopify — certificates are auto-provisioned per domain.
- For Shopify Plus stores using a custom storefront or headless setup, confirm the domain used by your headless front end is also added under Settings → Domains so Shopify provisions its certificate.
- Enterprise plans with dedicated IP or third-party CDN (e.g. Fastly custom config) should contact their Shopify Plus Merchant Success Manager to confirm certificate renewal procedures.
How to fix ssl cert expiring soon on WooCommerce
- WooCommerce itself does not manage SSL — the certificate is controlled by your web host or server.
- Log in to your hosting control panel (cPanel, Plesk, Kinsta, WP Engine dashboard, etc.) and navigate to the SSL/TLS section.
- If your host uses Let's Encrypt (free, auto-renewing 90-day certs): confirm the auto-renewal cron job is active. In cPanel go to Security → SSL/TLS → Manage SSL Sites and check the expiry; in Plesk go to Domains → your domain → SSL/TLS Certificates.
- If your host provides a paid certificate, follow their renewal wizard, complete domain validation, and re-install the certificate through the SSL/TLS section.
- After renewal, visit your wp-admin → Settings → General and confirm 'WordPress Address' and 'Site Address' both start with https://.
- Install the free 'Really Simple SSL' plugin to catch any mixed-content issues that might linger after renewal.
How to fix ssl cert expiring soon on BigCommerce
- BigCommerce automatically provisions and renews SSL certificates for all storefronts hosted on bigcommerce.com and for custom domains connected through the control panel.
- To verify: go to BigCommerce Admin → Store Setup → Store Profile → Storewide HTTPS and confirm 'Storewide HTTPS' and 'HSTS' are enabled.
- For custom domains, go to Admin → Store Setup → Store Profile and confirm the primary domain is set correctly; BigCommerce will manage its certificate.
- If you use a third-party CDN or a custom SSL certificate (Enterprise plans), log in to your CDN or certificate authority dashboard and follow their renewal steps, then upload the new certificate bundle in your CDN's SSL section.
- Contact BigCommerce Support via the Help Center if the certificate status does not update within 48 hours of DNS being correctly pointed.
How to fix ssl cert expiring soon on Wix
- Wix automatically provisions and renews SSL for all Wix-hosted sites — no manual action is required for domains managed within Wix.
- To verify: go to Wix Dashboard → Settings → Domains. Each connected domain should show 'SSL: Active'.
- If SSL shows as inactive, click the domain, then click 'Enable SSL' and allow up to 24 hours for provisioning.
- For externally purchased domains connected to Wix via nameservers, SSL is still managed by Wix once DNS propagation is complete.
- For domains connected by pointing DNS records (A/CNAME) rather than transferring nameservers, confirm the DNS entries match Wix's required values exactly, as incorrect DNS blocks SSL issuance.
How to fix ssl cert expiring soon on Wix Studio
- SSL management in Wix Studio is identical to standard Wix — certificates are auto-provisioned per connected domain.
- Check domain SSL status under Settings → Domains in the Wix Studio dashboard.
- If SSL is inactive, re-check DNS configuration and click 'Enable SSL'; allow up to 24 hours.
How to fix ssl cert expiring soon on Squarespace
- Squarespace automatically provisions free SSL certificates via Let's Encrypt for all Squarespace-hosted domains and auto-renews them.
- To check: go to Squarespace Dashboard → Settings → Domains. A green lock icon next to each domain indicates active SSL.
- If a domain shows SSL as inactive or pending, navigate to Settings → Domains → click the affected domain → select 'Use Squarespace Nameservers' or verify your external DNS is correctly pointed. Squarespace cannot issue a certificate if DNS is misconfigured.
- If SSL remains inactive after 72 hours of correct DNS configuration, contact Squarespace Support via Help → Contact Us.
How to fix ssl cert expiring soon on Webflow
- Webflow automatically provisions and renews SSL certificates for all sites published to webflow.io subdomains and custom domains added through the Webflow dashboard.
- To verify: go to Webflow Dashboard → select your project → Publishing → Custom Domains. Each domain shows an SSL status indicator.
- If SSL shows as 'Pending' or 'Error', confirm your domain's DNS A-record (for apex domains) or CNAME (for www) matches the values shown in Webflow's domain settings exactly.
- Click 'Check DNS' in the Webflow domains panel to trigger a re-check after updating DNS records.
- If the issue persists, remove and re-add the custom domain, then re-publish the site to trigger fresh certificate provisioning.
How to fix ssl cert expiring soon on Adobe Commerce (Magento)
- Adobe Commerce does not manage SSL — the certificate lives at your web server (Apache/Nginx) or load balancer layer, or within Adobe Commerce Cloud.
- Adobe Commerce Cloud (Pro/Starter): SSL is managed via Fastly CDN. Log in to the Cloud Console (console.magento.com), navigate to your project → Environments → your environment → click 'Configure domain'. TLS certificates are provisioned and renewed automatically by Fastly for domains routed through it.
- Self-hosted / on-premise: Log in to your server, renew the certificate through your CA or Let's Encrypt (e.g. run: sudo certbot renew), then reload your web server (sudo systemctl reload nginx or apache2).
- After renewal, update the Base URLs in Magento Admin → Stores → Configuration → General → Web → Base URLs (Secure) to confirm https:// is used.
- Verify the certificate in your server's virtual host config file (/etc/nginx/sites-available/yourstore.conf or /etc/apache2/sites-available/yourstore.conf) references the new certificate file paths.
How to fix ssl cert expiring soon on Magento Open Source
- Certificate management is identical to self-hosted Adobe Commerce above — the SSL certificate lives at the web server or load balancer level.
- Renew via Let's Encrypt (certbot renew) or your paid CA, reinstall the certificate in your Apache/Nginx virtual host config, and reload the web server.
- Confirm Magento Admin → Stores → Configuration → General → Web → Base URLs (Secure) uses https://.
How to fix ssl cert expiring soon on PrestaShop
- SSL is managed by your web host or server, not PrestaShop itself.
- Renew the certificate through your hosting control panel (cPanel/Plesk Let's Encrypt section or paid CA wizard).
- After renewal, in PrestaShop Admin go to Shop Parameters → General and ensure 'Enable SSL' and 'Enable SSL on all pages' are both set to Yes.
- Clear PrestaShop's cache under Advanced Parameters → Performance → Clear cache after confirming the new certificate is active.
How to fix ssl cert expiring soon on OpenCart
- SSL is managed at the hosting/server level. Renew through your hosting control panel or Let's Encrypt.
- After renewal, update config.php and admin/config.php in the OpenCart root to ensure HTTP_SERVER and HTTPS_SERVER constants use your https:// URL.
- In OpenCart Admin go to System → Settings → your store → Server tab and confirm 'Use SSL' is set to Yes.
How to fix ssl cert expiring soon on Headless / Custom (I build in code)
- Identify where TLS termination occurs: your origin server, a CDN (Cloudflare, Fastly, CloudFront), or a load balancer.
- If using Cloudflare: log in → select your domain → SSL/TLS → Overview. Cloudflare's Universal SSL auto-renews; confirm it is set to 'Full (Strict)' and the origin certificate is also renewed separately.
- If using Let's Encrypt with Certbot on a Linux server: run 'sudo certbot renew --dry-run' to test, then 'sudo certbot renew' to renew. Ensure a cron job or systemd timer runs this at least twice a day (standard Certbot install sets this up automatically).
- If using a paid CA certificate: download the new certificate bundle, update the certificate and private key paths in your Nginx/Apache/Caddy config, and reload the service.
- For Kubernetes environments, update the TLS Secret referenced by your Ingress resource, or use cert-manager with a Let's Encrypt ClusterIssuer for fully automated renewal.
- After renewal, verify the new expiry using: echo | openssl s_client -connect yourdomain.com:443 2>/dev/null | openssl x509 -noout -dates
Does your site have this issue?
Run a free SEOLZ scan to find ssl cert expiring soon — and every other issue — across your whole site in minutes.
Scan my site freeFrequently asked questions
What is Ssl cert expiring soon?
An SSL/TLS certificate is the digital credential that enables the padlock icon and "https://" in your store's address bar. It proves your site is legitimate and encrypts all data — including passwords and payment details — traveling between your customers' browsers and your server. Every certificate has an expiry date, and once it lapses (or gets dangerously close to expiring), browsers display a full-page "Your connection is not private" warning that blocks visitors from reaching your store. Renewing means obtaining a fresh certificate and installing it before the old one expires.
Why does ssl cert expiring soon matter?
An expired SSL certificate instantly kills conversions: browsers like Chrome and Firefox show a hard red-screen security warning that most shoppers will not click past, meaning your store becomes effectively unreachable. Google also treats HTTPS as a ranking signal, so a lapsed certificate can cause ranking drops and removal from Shopping feeds. Beyond lost revenue, transmitting customer data over an insecure or unverified connection is a data-protection compliance failure (GDPR, PCI-DSS, CCPA) that carries real legal and financial risk. Acting with at least 30 days' lead time ensures there is buffer for any renewal delays or propagation issues.
How do I fix ssl cert expiring soon?
Renew your SSL/TLS certificate before it expires to keep your store secure, trusted, and visible in search results.
Authoritative references
- OWASP Top Ten — OWASP
- OWASP Cheat Sheet Series — OWASP
- HTTP Strict-Transport-Security (HSTS) — MDN
- Website security — MDN