Short answer: To renew an SSL certificate, check when it expires, order a renewal from your domain provider or host, confirm you own the domain, and install the new certificate. Or choose a setup that renews automatically, so there's nothing to track and no renewal fee to approve each cycle.

If your buyers visit your website and see "Your connection is not private," most won't click through. For an exporter, that can mean a lost enquiry from a buyer who never tells you why. This is what happens when an SSL certificate expires, and it's easy to prevent.

What is an SSL certificate, and why does it expire?

An SSL certificate is what puts the padlock next to your web address and keeps buyers' information safe on your site. It's issued for a fixed period and must then be renewed.

That period is getting shorter. Since March 15, 2026, the maximum validity of a new public SSL certificate is 200 days, down from 398. It falls to 100 days in March 2027 and 47 days in 2029. Free certificates from Let's Encrypt are valid for 90 days.

So renewal is no longer a once-a-year job. The more often it comes up, the more it matters whether you pay each time and whether someone remembers to do it.

How to check when your SSL certificate expires

1. Open your website and click the padlock next to the address.

2. Click "Connection is secure," then "Certificate."

3. Look for the "Valid to" date.
   
   

You can also paste your web address into any free online SSL checker. Check a few weeks ahead, not on the last day.

How to renew an SSL certificate manually

1. Log in to wherever you bought the certificate (your domain provider or hosting company).

2. Order the renewal and pay the fee.

3. Confirm you own the domain, usually through an email link.

4. Install the new certificate, or ask your provider's support to do it.

5. Open your site and check the padlock is back.
   
   

Then you repeat this when it expires again. If you forget, or the reminder email lands in a spam folder, your site shows a warning until it's fixed.

What happens if your SSL certificate expires?

Visitors see a full-page warning that your site isn't safe, and they have to click past it to continue. Many leave instead. The site isn't down, but enquiries, logins and order forms stop reaching you until the certificate is renewed.

Manual vs automatic renewal

Do you have to keep paying for SSL?

Not necessarily. Some domain providers charge for the certificate and again at every renewal. Others include it, and many website platforms offer it free. Before you renew, ask your provider two questions: what will it cost this time, and does it renew on its own?

On GlobalLinker, a free SSL certificate comes with Premium Plus membership and renews automatically for as long as you remain a member. You keep your own domain name, and there's no certificate to track, order or pay for separately.

→ See how free, automatic SSL works on GlobalLinker

FAQ

How often do SSL certificates need to be renewed?
It depends on the provider. Since March 2026 the industry maximum is 200 days, and Let's Encrypt certificates last 90 days. With automatic renewal you don't need to track any of this.

What happens when an SSL certificate expires?
Browsers show visitors a "Your connection is not private" warning, and many leave without entering your site.

How do I get an SSL expiry notification?
Most providers email you before expiry, but those emails are easy to miss. Automatic renewal removes the need for a reminder.

Can I renew an SSL certificate before it expires?
Yes, and you should. Renewing a few weeks early leaves time to fix problems before buyers see a warning.

Is there a free alternative to a paid SSL certificate?
Yes. Free certificates exist, and some hosting or website platforms include one with their plan. Check whether it renews automatically, because a free certificate you must renew yourself still needs attention.

Image source: Open AI

Disclaimer: The views and opinions expressed in this article are those of the author and do not necessarily reflect the views, official policy or position of GlobalLinker.