Renew the certificate before it expires on Netlify
Why it matters
A certificate that is close to its end date will cause a site outage if it is not renewed in time. Automatic renewal normally replaces certificates well before then, so this often means renewal has silently stopped working.
The fix
- Open Domain management then HTTPS to read the certificate status. Netlify renews its Let's Encrypt certificates automatically when the domain's DNS still points at Netlify.
- If you installed a custom certificate, renew it at your CA and install the new one, or switch to the Netlify-managed certificate.
Related
- Reported by the certificate chain and expiry check
- Renew the expired TLS certificate
- Fix a certificate that is not valid yet
- Install a certificate that covers this hostname
- Replace the self-signed certificate with a trusted one
- Use a certificate from a publicly trusted authority
- Serve the full certificate chain
- Replace the expired intermediate certificate
- Re-issue the certificate with a stronger key
- Replace the certificate that uses a broken hash
- Fix the certificate that browsers reject
Scan your domain to see whether this applies to you.