Good to know

What is an SSL certificate?

The credential behind the padlock: it proves a site's identity and encrypts traffic (today via TLS). Browsers warn loudly when one is missing, expired, or covers the wrong name.

How long before expiry should I renew?

Modern certificates last ~90 days and renew automatically on good hosting. If you're under 14 days with no auto-renewal, act now. Sites on xigzag renew their certificates automatically — it's never your job.

What are SANs?

Subject Alternative Names — the exact hostnames a certificate covers. If www isn't listed, https://www.yourdomain breaks even when the apex works.