Wix SSL certificate expired

Wix ssl certificate expired means shoppers and readers hit TLS errors on your connected domain, while username.wixsite.com may still be secure.

Wix provisions certificates automatically for domains connected under Settings → Domains. Traffic that still resolves to a previous host presents that host’s expired cert—often misreported as Wix SSL failure.

Start with DNS and domain connection status, not Velo code or app market installs.

First response

Domains panel: note whether the domain shows Connected, Setup incomplete, or Pointing elsewhere. Copy Wix’s required name servers or A/CNAME records depending on connection method.

Test username.wixsite.com vs www.yourbusiness.com. Export whether the domain is registered with Wix or externally.

List marketing pixels or verification TXT records recently removed. Capture Wix support ticket ID if status stuck on “SSL not ready” over 24 hours.

Wix Ascend, email marketing, and abandoned cart flows embed links to the custom domain—export sample messages and test each URL. Wix ssl certificate expired during holiday sales often appears first in Facebook Ads rejection emails, not in Wix dashboard banners.

What this error means

Wix CDN terminates HTTPS for properly connected domains and renews certificates while DNS delegation remains correct. Browsers enforce PKIX validity on the served leaf; expired material blocks the Editor preview on live domain URLs and breaks Wix Stores checkout.

Domains only pointed via registrar forwarding without Wix connection continue hitting the old TLS endpoint. Wix ssl certificate expired in the true platform sense occurs when Wix serves an outdated cert—verify by checking that openssl connects to Wix infrastructure with past notAfter.

Common causes

Partial connect: nameservers updated at registrar but subdomain still A-recorded to legacy host.

Agency disconnects domain from Wix site without removing DNS, leaving orphan HTTPS on expired parking page.

Multiple Wix sites in one account attempting to attach same domain. CAA or security appliances intercepting validation (rare for Wix managed DNS).

Using external CDN in front of Wix against support guidance. Domain expired at registrar simultaneously—looks like SSL but is DNS NXDOMAIN first.

Wix Hotels and Restaurants verticals still rely on the same connected domain TLS—mobile apps deep-link to HTTPS routes that fail PKIX when the leaf ages out. Velo backends deployed as part of the site cannot override expired edge certificates on the primary domain.

Confirm from the outside

echo | openssl s_client -connect www.yourbusiness.com:443 -servername www.yourbusiness.com 2>/dev/null \
  | openssl x509 -noout -dates -subject -issuer -serial

dig +short NS yourbusiness.com
dig +short www.yourbusiness.com

curl -vI --connect-timeout 15 https://www.yourbusiness.com/ 2>&1 \
  | grep -Ei 'expire|SSL certificate|server:'

Wix default:

echo | openssl s_client -connect username.wixsite.com:443 -servername username.wixsite.com 2>/dev/null \
  | openssl x509 -noout -dates -issuer

How to read the output

If issuer/IP differs from Wix endpoints on custom domain, fix connection or DNS first. Wix-issued chain with expired notAfter while dashboard shows connected merits Wix support with openssl output. Registrar expiry shows in RDAP before TLS layer.

Browser spot-check

Wix mobile editor previews may use a different hostname than live traffic—always verify the customer’s published domain in an external browser after changes.

Fix checklist

Work this list in order for Wix ssl certificate expired. Small businesses should test checkout from a device that never opened the site during the outage.

1. Connect domain wizard—complete all steps; use Wix nameservers or published records exactly.
2. Remove old A records to prior hosting; avoid conflicting apex forwarding.
3. Wait for DNS propagation; click Verify Connection in Domains panel.
4. Set primary domain for site; remove unused domain links to other Wix sites.
5. Enable HTTPS / force SSL in SEO settings once valid.
6. Re-test openssl on apex and www.
7. Test Wix Stores checkout, bookings, and member login URLs.
8. Store registrar credentials in client vault for renewals.

Roll out and verify

Open Wix Stores checkout on mobile Safari and Chrome after recovery—ad blockers sometimes mask TLS errors as cart bugs. If Velo fetches third-party APIs, those hosts need their own valid certs; wix ssl certificate expired on the main domain does not explain mixed widget failures.

Resend abandoned-cart emails only after landing pages load without warnings. Update Google Business Profile and social bio links if campaigns temporarily pointed at wixsite.com fallbacks.

Client handoff: record Wix account owner email and whether the domain auto-renews at Wix Domains versus GoDaddy—registration lapses recreate SSL confusion within a year.

When to use automation

Small businesses discover expiry when Google Ads disapproves landing URLs. Monitor connected production domains with external TLS, not only default wixsite.com URLs.

/check after every domain connect. ssldays pairs certificate monitoring with RDAP so registration renewal happens before Wix loses DNS control.

Wix merchants rarely have SSH—external TLS is the only proof of recovery. Monitor ad landing domains and booking subpaths, not only the homepage. Facebook and Google ad reviewers fetch URLs from datacenter IPs that still see expired material minutes after you think DNS fixed.

See Squarespace SSL certificate issues and Shopify SSL certificate errors for similar hosted storefront TLS incidents.

Franchise operators managing many Wix sites under one login should export the domain list monthly—local managers connect domains without telling HQ until ads fail. Wix Ascend email links reuse the custom domain; newsletter blasts amplify TLS errors when thousands of customers click simultaneously.

Marketplace dropship integrations pull product feeds over HTTPS from the same domain; expired TLS stops inventory updates while a static homepage still displays yesterday’s catalog. Train merchants that Velo custom backends cannot override platform certificate renewal on the primary connected domain.

Merchants close wix ssl certificate expired tickets only after mobile checkout and desktop checkout both load without warnings—Wix Stores uses the same cert but different cookie paths. If the domain registrar is external, confirm auto-renew is funded; registration expiry mimics SSL panic. Save Domains panel status screenshots for franchise owners who lack technical vocabulary to describe DNS.

Small business owners often discover Wix TLS issues when Google Business stops showing their website link, or when Facebook rejects boosted posts that reference an insecure landing page. Coaches and consultants who collect payments through Wix should test booking flows from a friend phone outside the office WiFi before announcing recovery on social media.

Multi location franchises should centralize domain connections in one Wix account or accept that local managers will create duplicate connection attempts that stall issuance. Velo tutorials sometimes encourage custom API domains on separate DNS; those labels still need valid certificates even when the main Wix site recovers first.

Chamber of commerce and nonprofit members often rely on volunteer webmasters; store succession notes that include Wix login, domain registrar, and last successful external TLS check date reduce panic renewals. Seasonal businesses reopening after months offline should run a live check before reopening ads spend. Food trucks and caterers promoting limited menu drops over Wix should verify QR code menus printed for events resolve without TLS warnings on the exact short links guests will scan. Salon and spa clients booking through Wix should retry confirmation emails only after the booking hostname shows trusted TLS on phones outside the shop WiFi.