An expired SSL certificate shows visitors a full-page security warning, and most will leave. It is one of the most avoidable website outages.
Check expiry with our SSL checker
- Open the free SSL checker.
- Enter your domain, without https://.
- Read "Valid until" and "days left". We also show the issuer, the names covered and whether browsers trust the certificate.
Check in your browser
Click the padlock next to the address, open the connection or certificate details, and look at "Valid from" and "Valid to".
What can go wrong
| Problem | Cause | Fix |
|---|---|---|
| Expired | Auto-renewal failed | Reissue the certificate |
| Name mismatch | Certificate lacks the domain or www | Include both names |
| Not trusted | Self-signed or missing chain | Install a certificate from a trusted authority |
| Mixed content | Page loads http resources | Change links to https |
Why automatic renewal sometimes fails
- The domain's DNS no longer points to the server that must prove ownership.
- A firewall or redirect blocks the validation request.
- The hosting account ran out of disk space or was suspended.
- The domain itself expired.
Prevent surprises
- Check certificates monthly, and always after moving hosting or changing DNS.
- Use a monitor that emails you when less than 14 days remain.
- Keep your hosting and domain active.
New to HTTPS? Start with our free SSL guide.
What the SSL checker shows beyond the date
The expiry date is only part of the story. A certificate can be unexpired and still cause warnings. Our checker also reports whether the certificate covers the exact domain name, whether browsers would trust the issuer, which protocol was negotiated and the certificate chain. When the page says "does not match this domain", the certificate was issued for a different name, which commonly happens when a site is moved to a new server that still presents the old default certificate.
Checking both versions of your domain
Always test the bare domain and the www version. Visitors may arrive on either. A certificate that covers only one of them produces warnings for the other. A good certificate lists both in its "covered names".
A monthly SSL routine
- Check your main domain and any subdomains such as shop or portal.
- Note days remaining; investigate anything under 20 days when you expect auto-renewal.
- After any hosting or DNS change, test again the same day.
FAQ
How long does an SSL certificate last?
Free certificates are usually valid for about 90 days and renew automatically. Paid certificates may last up to a year.
Does an expired certificate affect SEO?
Yes, indirectly. Visitors leave and search engines may reduce visibility for a site that is not secure.
Try it now: use our free WHOIS lookup, DNS lookup, nameserver checker, SSL checker and IP & hosting lookup. All free, no signup.