Why renew SSL certificates?
SSL certificates have a limited validity period – usually 90 days for free certificates (e.g. Let's Encrypt) or up to 1 year for commercial certificates. An expired certificate causes browser warnings and can drive visitors away. Most certificate renewals can be automated.
Let's Encrypt90 days – auto-renewal recommended
Commercial1 year – manual renewal required
Warning thresholdRenew at 30 days remaining
Let's Encrypt with Certbot (recommended)
Certbot is the official Let's Encrypt client and automates certificate renewal. Once set up, certificates are renewed automatically.
Install Certbot (Ubuntu/Debian)
sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com
Manual renewal
sudo certbot renew
sudo certbot renew --dry-run
Automatic renewal via Cron
0 3 * * * certbot renew --quiet
Renewal via cPanel (shared hosting)
Most hosting providers with cPanel offer AutoSSL – a feature that automatically renews SSL certificates.
Step 1Log into cPanel
Step 2Go to Security → SSL/TLS
Step 3Click "Run AutoSSL" or manually install new certificate
Step 4Verify renewal with SSL Check tool
Commercial SSL certificates
Commercial certificates from providers like DigiCert, Sectigo or GlobalSign require manual renewal:
Step 1Generate a new CSR (Certificate Signing Request)
Step 2Submit CSR to your certificate provider
Step 3Complete domain validation (DV, OV or EV)
Step 4Download and install the new certificate
Step 5Restart web server (Apache/Nginx)
SSL certificate renewal – what you need to know
SSL certificates must be renewed regularly to keep your website secure. Let's Encrypt certificates expire after 90 days but can be renewed automatically with Certbot. Commercial certificates typically last one year. Always renew at least 30 days before expiry to avoid downtime. Use our SSL Check tool to monitor your certificate validity at any time.