How to Renew Your SSL Certificate

SSL certificates have expiration dates. If your certificate expires, visitors will see scary security warnings. Here is how to keep your SSL current.

Free SSL (Let's Encrypt) — Automatic Renewal

Good news! Ahosting automatically renews Let's Encrypt certificates. No action needed from you.

• Certificates are valid for 90 days
• AutoSSL checks and renews daily
• Renewal happens approximately 30 days before expiration

If AutoSSL Fails to Renew

Occasionally, renewal can fail due to:

• DNS not pointing to the server
• Domain expired or suspended
• .htaccess rules blocking validation

To manually trigger renewal:

1. Log into cPanel
2. Go to Security ? SSL/TLS Status
3. Click Run AutoSSL

Paid SSL Certificates — Manual Renewal

Premium SSL certificates must be renewed manually before expiration.

Renewal Timeline

• 30 days before: Start the renewal process
• 7 days before: Urgent — renew immediately
• Expiration day: Visitors see security warnings

How to Renew

1. Purchase renewal from your SSL provider or Ahosting
2. You may need to generate a new CSR (or reuse existing)
3. Complete domain validation again
4. Install the new certificate in cPanel

Check Your Certificate Expiration

Method 1: Browser

1. Visit your HTTPS site
2. Click the padlock icon
3. Click "Certificate" or "Connection is secure"
4. View expiration date

Method 2: Command Line

echo | openssl s_client -servername yourdomain.com -connect yourdomain.com:443 2>/dev/null | openssl x509 -noout -dates

Method 3: Online Tool

Use SSL Labs to check certificate details including expiration.

What Happens If SSL Expires?

• Browsers show full-page security warnings
• Visitors cannot easily proceed to your site
• SEO rankings may be affected
• Forms and payments stop working properly
• Trust is damaged

Best Practice: Set calendar reminders 30 and 7 days before expiration for paid certificates. For free SSL, verify AutoSSL is working monthly.