Learn about certificate and domain expiry

Practical guides for certificate and domain-expiry monitoring.

• What the 47-day SSL certificate limit means for agencies

  Public TLS certificates are already capped at 200 days. See the schedule to 100 days in 2027 and 47 days in 2029.

• What happens when a domain name expires

  Understand expiration, grace periods, redemption, pending delete, and why domain expiry dates can differ.

• SSL certificate chain incomplete: what it is and how to fix it

  Learn what CHAIN_INCOMPLETE means, how to inspect a served chain, and how to fix missing intermediates.

• How an agency keeps a client domain and certificate inventory

  Build a workable inventory of client hostnames, certificates, and registration dates.

• Why Let's Encrypt and registrar auto-renew fail quietly

  Learn why certificate and domain auto-renewal can fail while a site still appears healthy.

• How to check when an SSL certificate expires

  How to check when an SSL/TLS certificate expires, what days left means, and what a one-off check can and can't tell you about a hostname.

• Domain expiry vs SSL certificate expiry

  A domain registration and an SSL/TLS certificate expire on different dates, renew through different companies, and fail differently. Here is how.

Also explore the free tools, learning guides, documentation, features, and comparisons.