← Back to Error Index
root@linuxfix:~/ssl_certificate_expired$
ssl certificate expired
SSL certificate has expired

Solutions

Prerequisites: Start by updating your system to resolve common issues and ensure the solutions provided below are compatible with your current environment.
check_latest_version && sudo apt update && sudo apt upgrade -y
Check certificate expiry

Verify certificate dates:

openssl x509 -in cert.pem -text -noout | grep "Not After"
echo | openssl s_client -connect domain:443 2>/dev/null | openssl x509 -noout -dates
Renew certificate

Get new certificate:

sudo certbot renew
sudo certbot certonly --webroot -w /var/www/html -d domain.com
sudo systemctl reload nginx
Check auto-renewal

Verify renewal is working:

sudo certbot renew --dry-run
crontab -l | grep certbot
systemctl status certbot.timer

What is ssl certificate expired?

SSL certificate is past expiration date, causing browser warnings and connection failures.

Common scenarios: Certificate expired, not renewed in time, or clock synchronization issues.

Common Causes

  • Certificate past expiration
  • Auto-renewal failed
  • Clock skew
  • CA certificate expired
  • Certificate not properly installed

Debugging Tips

curl -I https://domain.com
openssl s_client -connect domain:443
certbot certificates

Prevention

  • Set up auto-renewal
  • Monitor certificate expiry
  • Test renewal process
ssl certificate expiry security