How to fix ssl cert expiring soon on BigCommerce
Renew your SSL/TLS certificate before it expires to keep your store secure, trusted, and visible in search results.
Steps for BigCommerce
- BigCommerce automatically provisions and renews SSL certificates for all storefronts hosted on bigcommerce.com and for custom domains connected through the control panel.
- To verify: go to BigCommerce Admin → Store Setup → Store Profile → Storewide HTTPS and confirm 'Storewide HTTPS' and 'HSTS' are enabled.
- For custom domains, go to Admin → Store Setup → Store Profile and confirm the primary domain is set correctly; BigCommerce will manage its certificate.
- If you use a third-party CDN or a custom SSL certificate (Enterprise plans), log in to your CDN or certificate authority dashboard and follow their renewal steps, then upload the new certificate bundle in your CDN's SSL section.
- Contact BigCommerce Support via the Help Center if the certificate status does not update within 48 hours of DNS being correctly pointed.
What is ssl cert expiring soon?
An SSL/TLS certificate is the digital credential that enables the padlock icon and "https://" in your store's address bar. It proves your site is legitimate and encrypts all data — including passwords and payment details — traveling between your customers' browsers and your server. Every certificate has an expiry date, and once it lapses (or gets dangerously close to expiring), browsers display a full-page "Your connection is not private" warning that blocks visitors from reaching your store. Renewing means obtaining a fresh certificate and installing it before the old one expires.
An expired SSL certificate instantly kills conversions: browsers like Chrome and Firefox show a hard red-screen security warning that most shoppers will not click past, meaning your store becomes effectively unreachable. Google also treats HTTPS as a ranking signal, so a lapsed certificate can cause ranking drops and removal from Shopping feeds. Beyond lost revenue, transmitting customer data over an insecure or unverified connection is a data-protection compliance failure (GDPR, PCI-DSS, CCPA) that carries real legal and financial risk. Acting with at least 30 days' lead time ensures there is buffer for any renewal delays or propagation issues.
See the complete Ssl cert expiring soon guide for every platform and the full background.
Not sure if your BigCommerce store has this?
Run a free SEOLZ scan — we’ll find ssl cert expiring soon and every other issue across your whole site.
Scan my site free