HTTPS certificate expiry: what to watch.

1. Understand what an HTTPS warning means

Your browser validates the site's certificate, hostname, expiry dates and issuing chain. A certificate can be current but still fail if it is installed incorrectly or does not match the hostname.

An SSL certificate expiring is not the same as your domain registration expiring. Track both separately.

2. Check your public website

1. Visit your public HTTPS URL and check whether the browser reports a certificate warning.
2. Open the site's certificate information to inspect the validity dates and hostname.
3. Test the main domain and any important subdomains independently; their certificates may differ.
4. Ask your hosting provider how renewal works and where failed-automatic-renewal notices appear.

3. Build a renewal-response plan

1. Record who manages hosting, DNS and certificates, and how to reach them during an incident.
2. Check that automated renewal is actually enabled if your provider supports it.
3. Configure certificate-expiry visibility or reminders, and periodically confirm the dashboard is receiving current values.
4. After renewal, retest the real public HTTPS pages—not merely the renewal receipt.

4. Know the limitations of monitoring

Certificate status is only part of website reliability. An HTTPS connection can succeed while a booking form or payment flow is broken. Basic HTTP monitoring is an early-warning measure, not a substitute for full functional tests, independent backups or security maintenance.