The annual task AutoSSL removes.
THE PROCESS
- The authority notifies you before expiry, assuming the contact address is current.
- Order the renewal.
- Generate a new CSR in cPanel, or reuse the existing one where the authority permits.
- Complete any revalidation. Domain validated renewals are quick; organisation and extended validation may require documents again.
- Install the new certificate and bundle.
- Verify with an online checker.
TIMING
Start a month before expiry. Organisation and extended validation renewals can take longer than expected, and an expired certificate blocks every visitor.
THE FAILURE MODE
Nobody remembers. The notification goes to an address that is no longer monitored, or is filed as spam, and the first anyone knows is a browser warning on the live site.
PREVENTING IT
Calendar the expiry with a reminder a month ahead, independent of the authority's notifications Keep the authority's contact address current Consider whether you still need a purchased certificate at all, or whether AutoSSL would serve
