Certificate Has Expired
The certificate's end date has passed. With Let's Encrypt this almost always means automatic renewal stopped working. Check the site below to confirm what is wrong.
- Free
- No Sign-Up
- Live Lookup
Examples:
SSL Certificate Checker
The error, and the fix
Error CodesNET::ERR_CERT_DATE_INVALID · CERT_HAS_EXPIRED
Usual CauseThe certificate's end date has passed
Check From a Terminalopenssl s_client -connect example.com:443 -servername example.com
The certificate's end date has passed. With Let's Encrypt this almost always means automatic renewal stopped working.
How to fix it: Run certbot renew --dry-run to see why renewal fails (port 80 blocked, DNS moved, or the web server config changed), fix it, then certbot renew and reload the web server.
Questions
What does "certificate has expired" mean?
The certificate's end date has passed. With Let's Encrypt this almost always means automatic renewal stopped working.
How do I fix it?
Run certbot renew --dry-run to see why renewal fails (port 80 blocked, DNS moved, or the web server config changed), fix it, then certbot renew and reload the web server.
Is it safe to click through the warning?
Not on a site where you enter passwords or payment details: the connection may not be private. Fix the certificate instead.
Free Tools
More tools
SSL Certificate CheckerExpiry, issuer, chain, names and TLS version for any HTTPS site.DNS LookupA, AAAA, MX, NS, TXT, CNAME, SOA and CAA records for any domain.SPF CheckerValidate an SPF record and count its DNS lookups against the limit of 10.Firewall Rule GeneratorGenerate iptables, nftables and UFW rules for common server set-ups.
Stop abuse leaving your servers
Frabs watches every VM's outbound traffic and stops spam, scans and floods before the abuse report arrives.