How to fix ssl cert expiring soon on Adobe Commerce (Magento)

Steps for Adobe Commerce (Magento)

1. Adobe Commerce does not manage SSL — the certificate lives at your web server (Apache/Nginx) or load balancer layer, or within Adobe Commerce Cloud.
2. Adobe Commerce Cloud (Pro/Starter): SSL is managed via Fastly CDN. Log in to the Cloud Console (console.magento.com), navigate to your project → Environments → your environment → click 'Configure domain'. TLS certificates are provisioned and renewed automatically by Fastly for domains routed through it.
3. Self-hosted / on-premise: Log in to your server, renew the certificate through your CA or Let's Encrypt (e.g. run: sudo certbot renew), then reload your web server (sudo systemctl reload nginx or apache2).
4. After renewal, update the Base URLs in Magento Admin → Stores → Configuration → General → Web → Base URLs (Secure) to confirm https:// is used.
5. Verify the certificate in your server's virtual host config file (/etc/nginx/sites-available/yourstore.conf or /etc/apache2/sites-available/yourstore.conf) references the new certificate file paths.

What is ssl cert expiring soon?

An SSL/TLS certificate is the digital credential that enables the padlock icon and "https://" in your store's address bar. It proves your site is legitimate and encrypts all data — including passwords and payment details — traveling between your customers' browsers and your server. Every certificate has an expiry date, and once it lapses (or gets dangerously close to expiring), browsers display a full-page "Your connection is not private" warning that blocks visitors from reaching your store. Renewing means obtaining a fresh certificate and installing it before the old one expires.

An expired SSL certificate instantly kills conversions: browsers like Chrome and Firefox show a hard red-screen security warning that most shoppers will not click past, meaning your store becomes effectively unreachable. Google also treats HTTPS as a ranking signal, so a lapsed certificate can cause ranking drops and removal from Shopping feeds. Beyond lost revenue, transmitting customer data over an insecure or unverified connection is a data-protection compliance failure (GDPR, PCI-DSS, CCPA) that carries real legal and financial risk. Acting with at least 30 days' lead time ensures there is buffer for any renewal delays or propagation issues.

See the complete Ssl cert expiring soon guide for every platform and the full background.