Enable automatic SSL certificate renewal

Automatic SSL certificate renewal ensures your certificate never lapses without you noticing — most modern hosts and Cloudflare support this natively, but it needs to be actually confirmed active, not just assumed.

A lapsed certificate takes your entire site down behind a full-page browser warning with no easy click-through on modern browsers, and this is one of the most avoidable outages that still happens regularly.

How to do it

1. 1
   Check your certificate provider settings

   Confirm auto-renewal is genuinely enabled, not just available as an option.
2. 2
   Verify the payment or authorization method is current

   Some paid certificate providers fail renewal on an expired card just like any other subscription.
3. 3
   Set a calendar reminder as a backup check

   Even with auto-renewal active, a reminder a week before expiry catches the rare case where automation silently fails.
4. 4
   Confirm your DNS has not changed recently

   Certificate renewal often re-validates domain ownership via DNS, and a recent migration can break this silently.