Renew SSL Certificate – Step by Step Guide

Why renew SSL certificates?

SSL certificates have a limited validity period – usually 90 days for free certificates (e.g. Let's Encrypt) or up to 1 year for commercial certificates. An expired certificate causes browser warnings and can drive visitors away. Most certificate renewals can be automated.

Let's Encrypt90 days – auto-renewal recommended

Commercial1 year – manual renewal required

Warning thresholdRenew at 30 days remaining

Let's Encrypt with Certbot (recommended)

Certbot is the official Let's Encrypt client and automates certificate renewal. Once set up, certificates are renewed automatically.

Install Certbot (Ubuntu/Debian)

sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com

Manual renewal

sudo certbot renew
sudo certbot renew --dry-run

Automatic renewal via Cron

0 3 * * * certbot renew --quiet

Renewal via cPanel (shared hosting)

Most hosting providers with cPanel offer AutoSSL – a feature that automatically renews SSL certificates.

Step 1Log into cPanel

Step 2Go to Security → SSL/TLS

Step 3Click "Run AutoSSL" or manually install new certificate

Step 4Verify renewal with SSL Check tool

Commercial SSL certificates

Commercial certificates from providers like DigiCert, Sectigo or GlobalSign require manual renewal:

Step 1Generate a new CSR (Certificate Signing Request)

Step 2Submit CSR to your certificate provider

Step 3Complete domain validation (DV, OV or EV)

Step 4Download and install the new certificate

Step 5Restart web server (Apache/Nginx)

Check your certificate

SSL Check What is SSL/TLS?

Knowledge SSL Check DNS Lookup Port Check My IP

SSL certificate renewal – what you need to know

SSL certificates must be renewed regularly to keep your website secure. Let's Encrypt certificates expire after 90 days but can be renewed automatically with Certbot. Commercial certificates typically last one year. Always renew at least 30 days before expiry to avoid downtime. Use our SSL Check tool to monitor your certificate validity at any time.