Every SSL/TLS certificate has an expiry date. Once it expires, browsers will show security warnings and your visitors will see "Not Secure" messages. Checking your certificate's expiry date in Plesk takes about 30 seconds — here's how to do it.
Step 1: Log in to Plesk
Open your browser and go to your Plesk panel URL (usually https://yourdomain.com:8443). Enter your username and password to log in.
Step 2: Navigate to your domain
From the left sidebar, click Websites & Domains. Find the domain you want to check and click on its name to expand its options.
Step 3: Open SSL/TLS Certificates
Look for the SSL/TLS Certificates section on the domain dashboard. You'll see the current SSL status displayed here — either a green padlock with the certificate name, or a warning if no certificate is installed.
Click SSL/TLS Certificates to open the full certificate management page.
Step 4: View the expiry date
On the SSL/TLS Certificates page, you'll see details about the installed certificate, including:
- Certificate name — the label assigned to the certificate
- Certificate authority — who issued it (e.g. Let's Encrypt, DigiCert)
- Valid from — when the certificate was issued
- Valid until — the expiry date you're looking for
- Secured components — which parts of your domain are covered
The Valid until date tells you exactly when your certificate expires.
Step 5: Check from your browser (alternative method)
You can also check the expiry date directly from any browser:
- Visit your website using
https:// - Click the padlock icon in the address bar
- Click Certificate or Connection is secure (varies by browser)
- Look for the Valid to or Expires field
Important notes
- Let's Encrypt certificates are valid for 90 days. If the SSL It! extension is active, Plesk renews them automatically 30 days before expiry.
- Paid certificates (from DigiCert, Comodo, etc.) are typically valid for 1 year. These must be renewed manually or replaced with a free Let's Encrypt certificate.
- Enable the Keep websites secured toggle on the SSL/TLS Certificates page so Plesk can automatically replace an expired paid certificate with a free Let's Encrypt one.
- You can also use an external tool like SSL Shopper's SSL Checker to verify your certificate status from outside your server.
Troubleshooting
- No certificate shown: If the SSL/TLS Certificates page shows no installed certificate, your domain is not secured with SSL. Click Get it free to install a free Let's Encrypt certificate.
- Certificate shows as expired: Click Reissue Certificate for paid certificates, or wait up to 1 hour for Let's Encrypt auto-renewal (if enabled).
- Browser still shows old certificate: Clear your browser cache or wait a few minutes. SSL changes can take a short while to propagate.
- SSL It! not showing: The SSL It! extension must be installed. Contact your hosting provider if it's missing from your panel.
