YLB Score › The checks, explained › Part III, Will a stranger trust you?
Your padlock is about to expire, or could not be read
The padlock rests on a certificate with an end date. Let it lapse and every visitor sees a full-page warning. Modern ones renew themselves; older arrangements need a person to remember.
If ours could not read it at all, something about how it is set up is unusual, and whoever manages your hosting should look.
Worth about 2 points of your 100 for a typical businessAbout 5 min, by your host
See for yourself
SSL Labs reads the certificate and shows the expiry date.
- Free toolSSL Labs
How to fix it
- Ask your host to switch to automatic renewal.
- If it has already expired, renew it today; this is the one item that takes a site down.
The technical version, for your web person
TLS certificate. Read by a real handshake to the host actually served, never the bare domain (lessons.md 13). Fewer than 20 days to expiry loses the marks and caps the grade at D.
What the check reads. Days until expiry, read from a live TLS handshake to the served hostname (not the registrable apex).
This is one of the checks in a YLB Score report. Every report is free, read by a person before it goes out, and written so that you can act on it without us. Ask for yours.