Can you renew if I do not have the host login?

We need someone who can write DNS or the panel. Let’s Encrypt, Cloudflare Universal SSL, and custom certs are all in scope once that door is open.

Will email break if I change DNS?

MX is separate from the website A/AAAA. We do not touch mail records on an SSL rescue unless you ask.

SSL Certificate Expired: Browsers Block, Calls Stop

NET::ERR_CERT_DATE_INVALID is a revenue event. We renew, fix mixed content, and put HTTPS back on the apex the same day.

Chrome is not being dramatic

Visitors bounce. Forms fail. Google Search Console starts reporting coverage errors. An expired cert is not a branding issue.

Renew vs replace

Let’s Encrypt auto-renew that died on a crontab. Cloudflare proxy with origin cert mismatch. A leftover www SAN. We fix the chain the browser actually sees, not the one in a screenshot from last year.

Mixed content after the fix

HTTPS on the document with http:// images and scripts still fails the padlock. We grep the built HTML and CMS and close it.

Same-day path

Send the domain and who owns DNS. We put a valid cert on apex + www, prove the lock, and leave HSTS only when the chain is stable.

Questions

Can you renew if I do not have the host login?: We need someone who can write DNS or the panel. Let’s Encrypt, Cloudflare Universal SSL, and custom certs are all in scope once that door is open.
Will email break if I change DNS?: MX is separate from the website A/AAAA. We do not touch mail records on an SSL rescue unless you ask.