How to fix ssl cert expiring soon on Headless / Custom (I build in code)

Renew your SSL/TLS certificate before it expires to keep your store secure, trusted, and visible in search results.

Steps for Headless / Custom (I build in code)

  1. Identify where TLS termination occurs: your origin server, a CDN (Cloudflare, Fastly, CloudFront), or a load balancer.
  2. If using Cloudflare: log in → select your domain → SSL/TLS → Overview. Cloudflare's Universal SSL auto-renews; confirm it is set to 'Full (Strict)' and the origin certificate is also renewed separately.
  3. If using Let's Encrypt with Certbot on a Linux server: run 'sudo certbot renew --dry-run' to test, then 'sudo certbot renew' to renew. Ensure a cron job or systemd timer runs this at least twice a day (standard Certbot install sets this up automatically).
  4. If using a paid CA certificate: download the new certificate bundle, update the certificate and private key paths in your Nginx/Apache/Caddy config, and reload the service.
  5. For Kubernetes environments, update the TLS Secret referenced by your Ingress resource, or use cert-manager with a Let's Encrypt ClusterIssuer for fully automated renewal.
  6. After renewal, verify the new expiry using: echo | openssl s_client -connect yourdomain.com:443 2>/dev/null | openssl x509 -noout -dates
Official Headless / Custom (I build in code) documentation ↗

What is ssl cert expiring soon?

An SSL/TLS certificate is the digital credential that enables the padlock icon and "https://" in your store's address bar. It proves your site is legitimate and encrypts all data — including passwords and payment details — traveling between your customers' browsers and your server. Every certificate has an expiry date, and once it lapses (or gets dangerously close to expiring), browsers display a full-page "Your connection is not private" warning that blocks visitors from reaching your store. Renewing means obtaining a fresh certificate and installing it before the old one expires.

An expired SSL certificate instantly kills conversions: browsers like Chrome and Firefox show a hard red-screen security warning that most shoppers will not click past, meaning your store becomes effectively unreachable. Google also treats HTTPS as a ranking signal, so a lapsed certificate can cause ranking drops and removal from Shopping feeds. Beyond lost revenue, transmitting customer data over an insecure or unverified connection is a data-protection compliance failure (GDPR, PCI-DSS, CCPA) that carries real legal and financial risk. Acting with at least 30 days' lead time ensures there is buffer for any renewal delays or propagation issues.

See the complete Ssl cert expiring soon guide for every platform and the full background.

Not sure if your Headless / Custom (I build in code) store has this?

Run a free SEOLZ scan — we’ll find ssl cert expiring soon and every other issue across your whole site.

Scan my site free

Fix ssl cert expiring soon on another platform