snag.page

Every check ยท HTTPS

Certificate renewal

transport/certificate

What it checks

The newest certificate for the site in Certificate Transparency logs, and how much of its life is left: flagged with under a quarter, or 14 days.

Why it matters

A certificate that isn't renewed in time takes the whole site down with a browser warning. Renewal is due well before the end, so a certificate this close to it means renewal is failing.

How to fix it

  1. Check the renewal: certbot renew --dry-run for Let's Encrypt, or your host's certificate settings.
  2. Fix what it reports, such as a DNS record that moved or a blocked /.well-known/acme-challenge/ path.

Check a site for this and everything else: snag.page. More on https: HTTPS Redirect to HTTPS No downgrade HSTS www and the bare domain