What Happens When an SSL Certificate Expires?

SSL certificate expiry is one of the most preventable causes of website downtime — and yet it catches thousands of businesses off guard every year. Here's exactly what happens when a certificate expires, minute by minute.

The Moment It Expires

SSL certificates have a precise expiry time, down to the second. The moment that timestamp passes:

• Every browser that connects to your site checks the certificate
• The browser sees the notAfter date has passed
• It immediately classifies your connection as insecure

There's no grace period. No warning to visitors. It's instant.

What Visitors See

Chrome

A full-page red warning screen:

Your connection is not private Attackers might be trying to steal your information from yourdomain.com

There's a small "Advanced" link at the bottom that lets technically savvy users bypass the warning — but most users leave immediately when they see this screen.

Firefox

Warning: Potential Security Risk Ahead Firefox detected a potential security threat and did not continue to yourdomain.com

Safari

This Connection Is Not Private This website may be impersonating "yourdomain.com" to steal your personal or financial information.

In every browser, the padlock icon disappears and is replaced with a red warning symbol.

The Business Impact

Immediate (minutes)

• Visitor traffic drops sharply — most users leave at the warning screen
• Any active sessions may be interrupted
• Contact forms, login pages, and checkout flows stop working properly

Short-term (hours)

• Google Search Console flags the site
• Search rankings begin to drop as Google re-evaluates your site's trustworthiness
• Customers who tried to visit and saw the warning tell others

Long-term (days)

• Email deliverability can be affected if your mail server's certificate also expired
• Customer trust takes time to rebuild even after renewal
• Review platforms may see negative feedback about "the unsafe website"

E-Commerce Is Especially Vulnerable

If you run an online store, an expired SSL certificate is catastrophic:

• Payment processors (Stripe, PayPal) refuse to process transactions on sites without valid SSL
• PCI DSS compliance requires valid SSL at all times
• Cart abandonment skyrockets — customers won't enter card details on a flagged site

Why Does It Happen?

The most common reasons businesses miss certificate expiry:

1. Renewal reminder emails go to spam or an unmanned inbox
2. The person who set it up left the company
3. Auto-renewal failed silently (payment method expired, hosting account issue)
4. Multiple domains with different expiry dates are hard to track manually
5. Certificates were moved between servers and the renewal schedule was lost

How to Fix an Expired Certificate

If your certificate has already expired:

1. Log into your hosting control panel or certificate provider
2. Renew or reissue the certificate — usually takes minutes for DV certificates
3. Install the new certificate on your server
4. Clear your CDN cache (Cloudflare, etc.) to ensure the new certificate propagates
5. Verify with an SSL checker that the new certificate is live

Total time: usually 15–60 minutes for experienced users.

How to Prevent It Happening Again

The only reliable prevention is automated monitoring with early alerts. Manual calendar reminders and renewal reminder emails both fail regularly.

CertGuard monitors your SSL certificate every 6 hours and sends alerts at 30, 14, 7, and 1 day before expiry — through email, Slack, or Teams. Even if your auto-renewal fails silently, you'll know about it with weeks to spare.

Free tier covers up to 3 domains. No credit card required.