Walkthrough · Intermediate · 20 minutes
How to Fix Common SSL Errors
Decode each browser warning into the specific repair it is requesting — a hands-on walkthrough in plain words that names the classic mistake before you reach it.
The short answer
The job: decode each browser warning into the specific repair it is requesting. Time to set aside: 20 minutes. Skill needed: intermediate.
Below is the full run of steps, the error most people trip over, and the short cut worth remembering. On Hosting & Domains plans several steps are already automated away — the guide marks each one.
By the Hosting & Domains team · Reviewed 18 August 2026
Intermediate
Experience required
5
Stages, start to finish
Free
Support included
Proven
On the platform itself
No technical background needed. This walkthrough was written for first-timers, proven on our own hardware, and honest about which parts are genuinely tricky rather than merely unfamiliar.
A promise before step one: nothing here is a one-way door. Any step with teeth is flagged, and the way back is printed beside it.
The outline first, then the detail
Over the whole job, you will start with the exact error name, expired: find the stalled renewal, mismatch: certify the name people type, untrusted: supply the whole chain and warning padlock: chase the http leftovers.
No part of this needs code or a terminal unless the guide says so plainly — and where it does, the exact commands are printed. The step-by-step is below, with the surrounding sections supplying the context that makes it hold.
The well-worn snag
Treating every SSL warning as one generic problem. Each error name is a separate fault with a separate cure, and blanket 'just reinstall the certificate' advice wastes hours on something the message already diagnosed free of charge.
It earns a section of its own because it is no obscure edge case — it is the single commonest reason this task reaches a support queue. Knowing it in advance turns the whole job from risky into routine.
A habit worth borrowing
Point an external SSL checker at your site to see the certificate as the world sees it: chain, names and expiry in one readout. Where your browser's cache and reality disagree, it decides the matter.
Habits this small are what separate the people who find hosting effortless from the people who find it draining. The same tools on both sides — a different way of working.
Where this platform takes work off you
Some steps in this guide exist only because hosting traditionally forced them on you. Here the SSL issues itself, the copy is taken daily without being asked, and one-click installers remove the manual setup. What is left is the part that was always genuinely yours.
Should a step still misfire, support answers at any hour with an actual fix rather than a knowledge-base link and a shrug. Half the guides on this site began as repeat patterns in our ticket queue.
The hosting these steps were tested on
Every walkthrough in this library is run on the platform we actually operate — cPanel, LiteSpeed, NVMe, one-click installs — so the instructions match your screen rather than gesturing at it from a distance.
Order an annual plan and the first year of the name's registration is on us.
- Every step checked exactly as published
- The snag named before it arrives
- The dull steps taken out of your way
- People reachable at any hour you stall
Why Hosting & Domains
Standard on every plan
Every undo written out
Any step that could bite is marked, together with the exact way to wind it back.
Help that keeps your hours, not ours
Stuck on step three at midnight? Support answers at any hour, mid-walkthrough included.
Honest about how big it is
Decode each browser warning into the specific repair it is requesting is a intermediate-level job — set aside 20 minutes, with the platform-absorbed steps marked.
The dull parts automated
SSL, backups and installs look after themselves here, leaving the guide to cover only what is genuinely yours.
Taken from real tickets
These guides came out of the support queue, so every snag flagged is one people genuinely hit.
Jargon never charges you
Every term is defined on the spot or linked to the jargon buster — nothing assumes prior knowledge.
Quick Start
Order placed to site online
- 1
Start with the exact error name
EXPIRED, NAME_MISMATCH, UNTRUSTED. The browser names the precise fault, and each fault has its own remedy, so the error text is the diagnosis rather than merely the complaint.
- 2
Expired: find the stalled renewal
Auto-renewal freezes when DNS has drifted away or validation fails. Correct the pointing and renewal resumes by itself, with no reinstallation needed.
- 3
Mismatch: certify the name people type
A certificate on www while traffic arrives at the bare domain, or the reverse. Coverage should include both, so read the SSL status page and reissue if either name is missing.
- 4
Untrusted: supply the whole chain
A manually installed certificate without its CA bundle passes on some devices and fails on others. Reinstall with the full chain the authority provided, which AutoSSL handles correctly on its own.
- 5
Warning padlock: chase the http leftovers
A padlock with a warning beside it means some element on the page still travels over http. Run a database search-replace to https and the certificate's work is complete.
Built In
Fitted to every plan
- LiteSpeed caching in the server itself rather than bolted on by plugin
- Spam and virus screening on every mailbox by default
- SSH, Git and Composer on the developer plans
- 99.9% uptime as the target, watched around the clock
- PHP versions set per site from the control panel
- Staging copies for trying a change before it goes live
- Softaculous included for one-click application installs
- Webmail in the browser plus IMAP, POP and SMTP for any client
- Your existing site brought across by our engineers, at no charge
- No set-up charge at any point, and no joining fee
Frequently Asked
The questions that come up most
Visitors report a warning my own browser never shows — who is right?
Probably both of you. Your browser may be holding a cached state that still validates, or a chain fault may only bite certain devices, with older Android the perennial example. An external checker gives the neutral view your own browser cannot.
The certificate is fine, yet the browser says 'not secure'.
The classic mixed-content case: the page itself loaded securely while something embedded, an image or a script, still came over plain http, so the browser marks the whole visit down. A protocol search-replace through the database usually restores the clean padlock in one pass.
How do I read my mail away from my desk?
Webmail runs in any browser, and every mailbox also speaks IMAP, POP and SMTP — so the app on your phone, the client on your desk and webmail stay in step, showing the same messages in the same state.
Will you move my existing site free of charge?
Yes. Open a ticket with the login for your current host and we bring the lot across — files, databases, mailboxes, configuration. You check the copy before DNS moves, and the old site keeps taking traffic right up to the moment the new one serves it, so nobody meets a gap.
Keep reading
How to Change Your PHP Version
Move your sites onto a quicker, still-supported PHP release without anything falling over — beginner level, about 10 minutes.
How to Keep Site Software Updated
A routine that patches your software's holes before anyone gets around to exploiting them — beginner level, about 15 minutes weekly.
Best Hosting for Wildcard SSL
A shortlist with the working shown: what to check, and the single trap most buyers fall into.
Domain Names
Find, register and transfer names — year one free with annual hosting.
WordPress Hosting
WordPress looked after for you — LiteSpeed caching, staging copies and a daily backup.
Changing hosts? Run through our checklist first.
A plain order of work for a move nobody visiting will notice: which files go over first, how to carry the mail across without losing a message, when exactly to repoint DNS, and the two mistakes behind nearly every outage we are asked to rescue.
Start on a plan priced without games.
NVMe hosting with SSL and the migration included, people answering at any hour, and a price that stays where it was.
View Domain Names plans