An expired certificate blocks every visitor.
IMMEDIATE ACTION
- cPanel > SSL/TLS Status. Confirm the expiry.
- Tick the domain and run AutoSSL.
- Wait a few minutes and refresh.
- Test in a private browsing window.
Most cases resolve within minutes.
IF AUTOSSL FAILS
Click the domain name for the specific reason. The usual causes are the domain no longer resolving here, a proxy blocking validation, or a redirect intercepting the validation path.
FOR A PURCHASED CERTIFICATE
You must obtain a new one from the authority, which takes time. Meanwhile, running AutoSSL on the domain provides a free valid certificate immediately, which is far better than leaving the site blocked.
Exclude the domain from AutoSSL again afterwards if you reinstall a purchased certificate.
WHILE IT IS BROKEN
There is no partial state. Every visitor sees a full-page warning. Treat it with the urgency of the site being down.
AFTERWARDS
Work out why renewal failed and fix that, or it recurs. If notification emails were going somewhere unread, fix the cPanel contact address.
