Website says “Not Secure”?

Visitors see a security warning, not your site

This usually shows up as one of a few things:

• “Not Secure” next to your address bar
• A full-page warning about an invalid or expired certificate
• The padlock is missing, or shows as broken or crossed out
• Only some pages trigger the warning, not the whole site

Almost always one of five things

• The SSL certificate expired and didn't auto-renew
• The certificate doesn't match the domain or subdomain being visited
• Some page elements load over http instead of https (“mixed content”)
• A recent domain or hosting change broke the certificate setup
• Cloudflare or another proxy has an SSL mode mismatch with your host

Yes, and it's usually quick

Most SSL warnings are fixed by reissuing or reconfiguring the certificate within a single Quick Fix session, and we confirm the padlock is back before we call it done. If it's tangled up with a bigger DNS or hosting migration, we'll walk you into Website Rescue instead.