Topic

Certificates.

Certificates now renew themselves, which removed most failures and made the remaining ones much harder to see.

3 areas · 7 pages

Short lifetimes, automated renewal, and what it means when the automation stops.

The failures that work in your browser and break for everyone else.

Which authorities may issue for your domain, and the record that decides it.

Start here

The pages worth reading first.

An incomplete chain works in your browser and fails for other people. How to spot it and how to fix it.

Most certificates renew themselves. When one does not, the renewal job has usually stopped running somewhere nobody is looking.

Visitors see a full-page warning before reaching your site. The four causes and what each one needs.

Expiry, issuer, covered names and the full chain of trust, checked continuously and kept as a dated lineage.

Automation removed most certificate failures and made the remaining ones harder to see.

Check yours

The free check covers all of this at once, in about ten seconds. No account, no card.