💼 Work & Digital
Domain and SSL Certificate Expiry: How Sites Go Dark Overnight
Updated July 19, 2026
A forgotten domain renewal is one of the few mistakes that can erase years of work in a single day. Your website vanishes, your email stops delivering, and if a squatter picks up the name, buying it back can cost far more than the renewal ever would have.
SSL certificate expiry is quieter but just as damaging: visitors hit a full-screen browser warning telling them your site is not safe. This guide covers how domain and SSL lifecycles actually work, and how to set reminders that catch both before anything breaks.
How Domain Registration and Renewal Actually Work
When you register a domain, you are leasing it from a registrar for a term of one to ten years. You never own it outright. If you do not renew before the expiration date, the domain enters a wind-down process that ends with it going back on the open market.
Auto-renew sounds like a complete solution, but it fails silently more often than people expect: the card on file expires, the email on the account is an old work address, or the registrar account itself was set up by a developer who has since moved on. Treat auto-renew as a backup, not the plan.
- Registration terms run 1 to 10 years depending on the registrar and domain extension
- Renewal notices go to the registrant email on file, which is often outdated
- Auto-renew fails when payment methods expire or accounts change hands
The Domain Expiry Grace Period and What Squatters Do
After a domain expires, most registrars offer a grace period during which you can renew at the normal price. Miss that, and many domains enter a redemption phase where recovery is still possible but typically costs a significant extra fee set by the registrar.
Once the redemption window closes, the domain is deleted and released for anyone to register. Domain squatters run automated tools that snap up freshly dropped domains with existing traffic or brand value, then offer them back to the original owner at a steep markup. If your domain carries your business name, losing it can mean rebranding or paying whatever the new holder demands.
SSL Certificate Expiry: Why 90-Day Certificates Changed Everything
SSL/TLS certificates prove your site is who it says it is and enable the padlock in the browser. Publicly trusted certificates are now capped at roughly one year (398 days), and free certificates from providers like Let’s Encrypt last only about 90 days by design.
Short lifetimes are safer, but they mean renewal is a constant chore unless it is automated. Most modern hosts renew Let’s Encrypt certificates automatically, yet automation breaks: DNS changes, server migrations, and rate limits all cause silent failures. When a certificate lapses, every visitor sees a security warning instead of your site, and many browsers make it deliberately hard to click through.
A Reminder Strategy That Covers Domains and Certificates
The fix is layered. First, confirm the registrant email on every domain you own is one you actually read. Second, turn on auto-renew everywhere, but treat it as a safety net. Third, set independent reminders that do not depend on the registrar or certificate authority emailing you.
For domains, an annual reminder set 30 or more days before expiry gives you time to fix a failed payment. For certificates, check your renewal automation quarterly rather than tracking each 90-day cycle by hand. A cascading reminder that nudges you at 30, 14, 7, and 1 days out means one missed email never becomes a dark website.
Frequently asked questions
What happens if my domain expires?
The site and any email on that domain stop working, and the domain enters a grace period during which you can usually renew at the normal price. After further redemption and deletion phases, it becomes available for anyone to register, including squatters.
How long do SSL certificates last?
Publicly trusted SSL/TLS certificates are capped at about one year (398 days). Free certificates from Let’s Encrypt last roughly 90 days and are designed to be renewed automatically.
Can I get my domain back after someone else registers it?
Sometimes, but not cheaply. You can try to buy it from the new owner or, if you hold a trademark, pursue a dispute process through ICANN’s UDRP. Both routes cost far more time and money than renewing on schedule.
Is auto-renew enough to protect my domain?
No. Auto-renew fails silently when your card expires or the account email goes stale. Keep it on, but back it up with an independent reminder set well before the expiration date.
Official sources
Related guides