What Is an Expired HTTPS Certificate and How Do You Fix It?

An HTTPS certificate helps create a secure connection between your website and its visitors. Certificates are only valid for a limited period and normally renew automatically.

If a certificate expires or becomes invalid, visitors may see warnings such as “Your connection is not private” and may be prevented from accessing the website.

An expired certificate does not automatically mean your website has been hacked. Usually, the certificate simply failed to renew.

How do you fix it?

For most website owners, the simplest solution is to contact your hosting provider.

Ask them to:

  1. Renew and install a valid SSL/TLS certificate.
  2. Make sure it covers your domain and the www version where applicable.
  3. Check that HTTPS is working correctly.
  4. Make sure automatic renewal is enabled.

If the certificate appears valid but visitors still receive warnings, ask your host or developer to check the complete SSL/TLS configuration. Problems can also be caused by an incorrect domain, certificate-chain problems or an incorrectly configured server.

What does JuiceBox check?

JuiceBox checks that your website’s HTTPS certificate is valid, trusted, matches your domain and has not expired.

Pass — Valid with 7+ days remaining.
Alert — Less than 7 days remaining or expiry cannot be confirmed.
Error — Expired, invalid, untrusted or cannot be verified.

If JuiceBox detects a problem, use Fix in Website Health for the next steps.

More JuiceBox Website Analyser

What Is Important About An Author Bio?

An Author Bio is a short summary on your website that explains who wrote an article…

What Is GEO / AI Citation Readiness?

GEO stands for Generative Engine Optimization. Just like traditional SEO helps your website rank high on…

WP JuiceBox

SEO, content and website health tools for WordPress.

Contact Signals

Contact Signals refer to clear, verifiable contact details—such as phone numbers, professional email addresses, physical business…

Privacy Policy

A Privacy Policy is a legally required document on a website that explains how a business…

Homepage Ping

Homepage Ping (or Homepage Response Time) measures the exact amount of time—in milliseconds—it takes for your…

PHP Version

PHP Version refers to the specific release of the PHP scripting language running on your web…

WP_DEBUG

WP_DEBUG is a built-in PHP constant in WordPress that toggles the developer “debug” mode across a…

WordPress REST API

The WordPress REST API is an interface that allows external applications and scripts to communicate directly…

XML Sitemap

An XML Sitemap is a structured file (formatted in XML) that lists all the important URLs…

Robots.txt

Robots.txt is a plain text file placed in a website’s root directory that provides instructions to…

Site Icon / Favicon

Site Icon / Favicon (short for “favorite icon”) is the small logo or graphic that represents…

HTTPS Redirect

HTTPS Redirect (or SSL Redirection) is an automatic server rule that forwards visitors and search engines…

Structured Data

Structured Data (commonly implemented via Schema.org markup in JSON-LD format) is standardized code added to a…

Page Layout (Headings)

Page Layout (Headings) refers to the structural hierarchy of a web page using HTML heading tags…

Word Count

Word Count is the total number of words contained within a single article, blog post, or…

Image ALT Text

Featured Image ALT Text (Alternative Text) is a short descriptive tag added to a webpage’s primary…

Social Share Preview

A Social Share Preview (often powered by Open Graph tags or Twitter Cards) is the visual…

About Meta Description

A Meta Description is a brief summary of a webpage that appears directly under the SEO…

About The SEO Title

An SEO Title (often called a Title Tag) is the title of a webpage that appears…

Currently Reading

What Is an Expired HTTPS Certificate and How Do You Fix It?

An HTTPS certificate helps create a secure connection between your website and its visitors. Certificates are…

How to Fix Missing Security Headers (Without Being a Developer)

You may have run a security check on your WordPress website and received a warning saying…