Business website update: shorter SSL certificate lifetimes
Let’s Encrypt’s October 2026 announcement confirms a reduction in its default certificate lifetime from 90 days to 64 days for certificates issued or renewed from 10 February 2027. Existing valid certificates will not be revoked as part of that change. The practical question for a business owner is whether certificate renewal, installation and failure alerts are working reliably.
Many hosting companies manage renewals automatically. Ask your provider who is responsible for checking that the renewed certificate is actually served to visitors. This is a planned change, rather than evidence that every website has a current fault. If your site already shows a warning, investigate the actual message and setup.
First, identify the warning your customers see
“Not secure” can mean that a page is using an unencrypted HTTP connection. A full-page connection privacy error can involve the certificate, the network or the visitor’s device. A red unsafe-site warning is a different issue again. Google’s guide to connection security explains those distinctions. Do not assume that every warning means the site has been hacked, or that buying a certificate will fix every problem.
What happens when an SSL certificate expires?
A website certificate helps a browser authenticate an HTTPS connection. When that certificate has expired, is not trusted or does not match the website address, visitors may see a certificate error instead of the page they expected. The investigation needs to consider which hostname is affected, the certificate being served and how the host manages renewals. A renewal also needs to be installed and served correctly.
An expired certificate is not the same as being removed from Google. It is a connection problem that can prevent customers reaching the site normally. Indexing and security warnings in search results are separate checks. Avoid describing the business as “blacklisted” until the actual issue has been established.
What to send when you ask someone to fix your website
Start with the full website address and the exact wording of the error. A screenshot is useful. Say when the site last worked, whether the fault affects every page and whether other people see it too. Include the hosting company or website platform if you know them, along with any recent renewal, update or migration that may be relevant.
You do not need to diagnose the fault before getting in touch. A short description such as “the homepage opens, but the enquiry form stopped sending after an update” is more useful than guessing at a technical cause. Keep passwords and hosting credentials out of the initial enquiry. Access can be arranged separately if investigation is agreed.
What if the website is down or may have been hacked?
A blank page, server error or domain that will not resolve needs a broader check than certificate renewal. Unexpected redirects, unfamiliar pages and changes you did not make should also be reported. Record what you can see and avoid repeatedly changing settings before the cause is understood. The right work depends on the platform, available access and backups; some incidents require specialist security support.
Getting practical help from Bear Media
I’m Garry at Bear Media, based in West Lothian. I offer website repair and support for small businesses in Livingston, Broxburn, Bathgate, Linlithgow, Edinburgh and the surrounding Lothians. The first step is to explain the problem and agree an investigation or repair, including any costs, before paid work starts.
Use the website repair enquiry form to send the website address and the closest description of the fault. You can ask about a one-off repair. Optional ongoing support is £75 a month for up to one hour, with additional support work at £75 an hour agreed in advance; that plan is separate from the price of a one-off repair.
