SSL certificates need to renew before they expire.
On many HostworX hosting accounts, free Let’s Encrypt SSL certificates normally renew automatically.
If an SSL certificate fails to renew, your website may show a browser warning such as “Not Secure” or “Your connection is not private”.
This guide explains common reasons SSL renewal can fail and what you can check.
What Happens If SSL Does Not Renew?
If SSL does not renew successfully, your website may:
- Show a security warning
- Stop loading securely with HTTPS
- Display an expired certificate message
- Cause visitors to lose trust
- Affect contact forms, login pages, or online shops
- Show errors in browsers such as Chrome, Edge, Firefox, or Safari
Common Reasons SSL Renewal Fails
SSL renewal can fail for several reasons.
Common causes include:
- The domain no longer points to the correct server.
- DNS records are incorrect.
- The domain has expired or one of the domains if they are aliased has expired..
- The hosting account is suspended.
- The website is blocking Let’s Encrypt validation.
- The domain was recently moved.
- The www version of the domain does not point correctly.
- There are redirect or configuration issues.
- The SSL certificate includes a subdomain that no longer works.
Step 1 – Check That the Domain Is Active
Make sure your domain name has not expired.
If the domain has expired, SSL renewal will fail because the domain cannot be validated properly.
Renew the domain first before trying to renew SSL.
Step 2 – Check That the Domain Points to HostworX
Your domain must point to the correct HostworX hosting server.
If the domain was moved to another provider, or the DNS records were changed, Let’s Encrypt may not be able to validate the domain.
Check that your domain DNS records are correct before trying to renew SSL again.
Step 3 – Check the www Version
If your SSL certificate includes the www version, make sure the www record points correctly.
Example: www.yourdomain.co.za
If www does not point to the correct server, SSL renewal may fail for that name.
Step 4 – Log Into DirectAdmin
Open your browser and visit: https://cp.yourdomain.co.za (Replace yourdomain.co.za with your own domain name.)
Enter your DirectAdmin username and password.
Click: Log In
Step 5 – Open SSL Certificates
Once you are logged into DirectAdmin, open the SSL area.
Click: Account Manager
Then click: SSL Certificates
Step 6 – Check the SSL Certificate Status
In the SSL Certificates area, check the status of the certificate.
Look for any warning or error messages.
The error message may explain why the SSL certificate failed to issue or renew.
Step 7 – Try to Renew or Reissue the Certificate
If the domain points correctly and there are no obvious DNS issues, you can try to request the certificate again.
Locate: Get automatic certificate from ACME Provider
Select: Let’s Encrypt
Select the domain names that should be included.
Click: Save
DirectAdmin will attempt to request a new certificate.
Step 8 – Wait and Test Again
After renewing or reissuing the SSL certificate, wait a few minutes.
Then open your website using HTTPS.
Example: https://yourdomain.co.za
Replace yourdomain.co.za with your own domain name.
Check whether the browser warning has cleared.
Important Notes
Please keep the following in mind:
- SSL renewal requires the domain to point correctly.
- DNS changes can take time to update.
- Expired domains cannot renew SSL correctly.
- Suspended hosting accounts may prevent SSL renewal.
- If the certificate includes www, the www DNS record must also work.
- Let’s Encrypt must be able to verify the domain.
When Should I Contact HostworX Support?
Contact HostworX Support if:
- You are unsure why SSL failed to renew.
- You see an SSL error in DirectAdmin.
- The domain points correctly but SSL still fails.
- The website shows an expired certificate warning.
- The SSL certificate renews but the website still says “Not Secure”.
- You recently moved DNS or changed hosting settings.
Please include the error message shown in DirectAdmin if one is available.
Conclusion
SSL certificates usually renew automatically, but renewal can fail if the domain, DNS, hosting, or website configuration is incorrect.
The most common causes are incorrect DNS records, expired domains, www records not pointing correctly, or validation issues.
If the problem is not clear, contact HostworX Support so the SSL certificate can be checked safely.
