Renew the certificate before it expires on Vercel
Why it matters
A certificate that is close to its end date will cause a site outage if it is not renewed in time. Automatic renewal normally replaces certificates well before then, so this often means renewal has silently stopped working.
The fix
- Vercel renews certificates it issued 14 to 30 days before they expire, so a certificate that is only just inside that window is not a fault.
- If it is closer than that, open the project's Domains settings, fix any configuration warning and check that CAA records allow letsencrypt.org.
- Certificates uploaded by an Enterprise team are not renewed automatically.
Related
- Reported by the certificate chain and expiry check
- Renew the expired TLS certificate
- Fix a certificate that is not valid yet
- Install a certificate that covers this hostname
- Replace the self-signed certificate with a trusted one
- Use a certificate from a publicly trusted authority
- Serve the full certificate chain
- Replace the expired intermediate certificate
- Re-issue the certificate with a stronger key
- Replace the certificate that uses a broken hash
- Fix the certificate that browsers reject
Scan your domain to see whether this applies to you.