The festive sale that died quietly: what happens when your SSL expires

SSL certificates expire. That's not a security scandal — it's a calendar fact. Let's Encrypt certificates last 90 days; paid ones a year. The scandal is how the expiry announces itself: not with an email, but with your sales dying.

The failure chain, hour by hour

1. Hour 0: The certificate lapses. Your site is still up — technically. But now every browser shows a full-page warning: "Your connection is not private. Attackers might be trying to steal your information."
2. Hour 1: Mobile users — 70%+ of Indian traffic — hit the warning and leave. Almost nobody clicks "Advanced → Proceed".
3. Hours 2-12: Your ads keep running. Every click costs you money and lands on a wall that scares the customer away. You're paying to frighten people.
4. Day 2: Google notices. Search ranking drops. Anyone who searched your brand sees the warning label on your result.
5. Day 3-7: Someone finally asks "why are sales down?" — and nobody looks at the certificate, because the site "looks fine" to the owner who clicked through the warning on their own laptop.

We've watched this chain on real scans. The worst part: renewal takes two minutes in any hosting panel. The entire damage happened because nobody was watching the expiry date.

The boring fix that works

Monitoring. Our scanner reads your certificate's exact expiry date on every scan and alerts at 30, 14, 7 and 3 days — on Telegram and email. If auto-renewal breaks (it happens — CAA records, changed emails, expired hosting cards), you get a month of warning, not a month of silence.