Give certificate renewal problems a clear owner

What this means for your practice

Monitor remaining validity and renewal failures independently of normal page availability. Assign an authorised owner who can investigate before visitors are affected.

How to review the arrangement

Rehearse a renewal-failure alert with the responsible administrator. Can they identify the service and approved recovery route? Ask the supplier how approaching expiry and failed renewal are monitored. The practice should know there is a named response, without needing to manage certificate settings itself.

Know which service needs attention before renewal becomes urgent

Keep a record of the services covered by certificates and the authorised administrator responsible for each. The practice does not need to manage the technical settings itself, but it should know who receives renewal warnings and who provides cover. Ask the supplier to explain how it detects a renewal problem while the existing certificate still works, rather than waiting for visitors to report a connection error.

Use a simulated warning to check that the administrator can identify the affected service and follow the approved investigation process. Record any dependency on another supplier or account, including how access is obtained through authorised arrangements. After corrective work, ask for confirmation that the service and renewal arrangement have been checked. Review approaching expiry together with unresolved warnings; either list alone can miss useful context. A named response and an understood recovery route make automatic renewal an arrangement somebody oversees, rather than a feature everyone assumes will always take care of itself.

How to check the result

Measure certificates approaching expiry with unresolved renewal problems.