Renew the certificate before it expires on Cloudflare
Why it matters
A certificate that is close to its end date will cause a site outage if it is not renewed in time. Automatic renewal normally replaces certificates well before then, so this often means renewal has silently stopped working.
The fix
- If the record is Proxied, open SSL/TLS then Edge Certificates and check the certificate status. Universal SSL certificates renew by themselves while the domain is proxied and no CAA record excludes Cloudflare's CAs.
- Custom certificates uploaded there do not renew automatically. Renew at your CA and upload the new one.
- If the record is DNS only, the certificate is your server's, so use the generic steps.
Related
- Reported by the certificate chain and expiry check
- Renew the expired TLS certificate
- Fix a certificate that is not valid yet
- Install a certificate that covers this hostname
- Replace the self-signed certificate with a trusted one
- Use a certificate from a publicly trusted authority
- Serve the full certificate chain
- Replace the expired intermediate certificate
- Re-issue the certificate with a stronger key
- Replace the certificate that uses a broken hash
- Fix the certificate that browsers reject
Scan your domain to see whether this applies to you.