How to renew an SSL certificate: guide and tips

Why SSL renewal is important

An expired SSL certificate causes browser warnings that scare away visitors. Your site is marked as unsafe and Google may lower your rankings. Timely renewal prevents these problems.

Setting up automatic renewal

Let's Encrypt via Certbot

Certbot schedules automatic renewal by default. Check if it works:

sudo certbot renew --dry-run

The timer checks twice daily if renewal is needed. Certificates are renewed if they expire within 30 days.

cPanel AutoSSL

AutoSSL automatically renews certificates when they expire within 14 days. Check the status via:

Go to SSL/TLS Status
View expiration dates
Click Run AutoSSL to manually trigger

Via your hosting provider

Most providers manage renewal automatically. Check your dashboard for current status and expiration date.

Manual renewal

Step 1: Generate new CSR

Use the same details as your original request or update your organization details if needed.

Step 2: Request renewal

For paid certificates:

Log in to your CA (Sectigo, DigiCert, etc.)
Find the renew option for your certificate
Upload the new CSR
Complete domain validation again

Step 3: Install the new certificate

Replace the old certificate in your control panel with the new files.

When should you renew?

Certificate type	Validity	Renew before expiry
Let's Encrypt	90 days	30 days
DV paid	1 year	30 days
OV/EV	1-2 years	60 days

Common problems

Certificate not automatically renewed

Possible causes:

DNS changes disrupting validation
Firewall blocking ACME requests
Certbot timer not active

Old certificate remains active

Restart your web server after installation:

sudo systemctl restart nginx
# or
sudo systemctl restart apache2

Chain certificate missing

Make sure to install the intermediate certificate too, not just the main certificate.

Set reminders

Don't blindly trust automatic renewal. Set a calendar reminder 14 days before expiration as a backup.

Frequently Asked Questions

How long does it take to implement this?

Implementation time varies per situation. Simple configurations can be done within an hour, more complex setups may take several hours to a day.

What are the costs?

Costs depend on your hosting provider and package. Many basic features are included for free, advanced features may incur additional costs.

Do I need technical knowledge?

You need little technical knowledge for the basics. Most hosting providers offer extensive documentation and support to help you.