When does my Cloudflare SSL certificate expire?

Short answer: Cloudflare usually renews its certificates automatically, but renewal can fail, for example when a DNS validation record is missing or the domain moved. An expired certificate puts a full-page security warning in front of every visitor.

How to check it yourself

1. In the Cloudflare dashboard, open your domain, then SSL/TLS, then Edge Certificates.
2. Check each certificate's status is Active and note its expiry date.
3. Click the padlock in your browser on your site to see the certificate it actually serves.
4. If a certificate is pending or failing, check the validation records it asks for in DNS.

What Preventionlabs shows

With a read-only Cloudflare token connected, every report shows the HTTPS certificate Cloudflare serves for your site: whether it's active and how many days until it expires. For example, from a real report: "certificate valid until 2027-01-13 (88 days), a Cloudflare-managed certificate, which renews automatically".

For a Cloudflare Pages custom domain, Cloudflare issues the certificate separately and its expiry date isn't in the zone's list, so the report says so instead of guessing; HTTPS itself is still checked.

Price

First report free, no card needed. Then A$50 a month, up to 10 domains.

Run your first report free

More questions it answers

• My SSL certificate expired and I didn't know. How do I stop it happening again?
• Is my Cloudflare SSL mode set wrong?
• Which pages on my site return errors to visitors?
• All questions