Website stewardship guide 14
If your domain lapses, your website and business email can stop working. If your SSL certificate expires, browsers warn visitors away. Turn on automatic renewal, keep the renewal email current, lock the domain against transfers, and confirm certificates renew themselves.
← All website stewardship guidanceFind the renewal dates
Turn on auto-renew
Lock the domain
Automate certificates
Watch the alerts
Why this matters
You rent your domain name from a registrar, a year or more at a time. If the renewal fails, the domain stops pointing to your website and email. Common causes are an expired card or notices going to a former employee. Getting the domain back can cost extra, and once the grace periods end, someone else can register it.
Your SSL/TLS certificate puts the padlock and "https" in the browser. It expires too. When it does, browsers show a full-page warning that most visitors will not click past. Certificate lifetimes are getting much shorter, so certificates need to renew automatically.
Responsible practices
Automatic renewal only works if the card on file is valid. Use a business card, and add a backup payment method if the registrar allows it. Consider renewing for several years at a time. Put the expiry date in your own calendar as well.
For .com and other generic domains, registrars must send renewal reminders about one month and one week before expiry, and another within five days after. Those notices go to the account's contact email. Use a shared business address someone reads, not a former employee's inbox.
Registrar lock (the status clientTransferProhibited) stops the domain being moved to another registrar without your approval. ICANN recommends it to prevent hijacking. Turn it on and use multifactor sign-in on the registrar account. Unlock it only when you deliberately transfer.
For generic domains, a registrar may offer a renewal grace period of up to 45 days after expiry, and it must interrupt the website and email before deletion so you notice. If the domain is deleted, a 30-day redemption period follows, when it can be restored, usually for an extra fee. Country-code domains such as .us follow their own rules. Treat these periods as a safety net, not a plan.
Most hosts and website builders issue and renew certificates automatically. Ask your provider to confirm this for every address you use, including www and any subdomains. The CA/Browser Forum, which sets certificate rules, is cutting maximum certificate lifetimes: 200 days from March 15, 2026, 100 days from March 15, 2027, and 47 days from March 15, 2029. Renewing by hand will become impractical.
Worked example
Hypothetical example: a landscaping company registered its domain years ago through a former web designer's account.
Renewals fail quietly. Put the dates, contact email, and payment method under business control before a notice goes to the wrong person.
Renewals
Find your domain's expiry date and confirm auto-renew is on.
Check that the registrar account email is a business address someone reads.
Confirm the domain is locked against transfers.
Ask your provider how your certificate renews and who is alerted if it fails.
Confirm automatic certificate issuance and renewal for every address the business uses, including www and subdomains.
Set up monitoring that alerts a named person before a domain or certificate expires.
Replace any hand-installed certificate with an automated process before the shorter lifetimes take effect.
Avoid these failures
Good website care lowers risk, but no provider can guarantee uninterrupted service.
Questions business owners ask
Your website and email usually stop working. For generic domains like .com, you may be able to renew during the registrar's grace period. A deleted domain can often be restored within a 30-day redemption period for an extra fee. After that, anyone can register it.
For most small-business sites, yes. Free certificates, such as those from Let's Encrypt, provide the same encryption as paid ones. What matters is that they renew automatically.
Only if someone renews your certificate by hand. If your host renews automatically, you should not notice a change. Ask your provider to confirm.
It reduces the number of renewals that can fail. Keep auto-renew on anyway, and keep the contact email and payment method current.
Primary guidance
Plan the next step