Expired Thawte Certificate

TUMIhq
TUMIhq used Ask the Experts™
on
Our Thawte SSL certificate expired about a week ago. I completely forgot about it and received no expiration warning from Thawte. I just went in and renewed. Do they provide a grace period? How long will it take for the renewal to be processed? Thank You.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
they will let you renew.
it will be processed within a day or two.
since it is a renewal, if none of your company information changed, it will be processed within minutes or hours.

Author

Commented:
Until it is processed, is my site insecure?

Commented:
It is still secure, but it will give users a warning that says your certificate has expired.  What the user does with that information is up to them.
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Author

Commented:
I would like to put up a message on our site informing users that they will see this message and instructing them how to bypass this. I just need to know it is secure. In IE, the Security Alert popup says the following:
The security certificate is from a trusted certifying authority.
The security certificate has expired or is not yet valid.
The security certificate has a valid name matching the name of the page you are trying to view.

Commented:
They just need to click Continue... however, the IE message will appear before your page.  If you have a non-secure area they go to first, then you can put the message there.  Also, be aware that firefox, safari, opera, chrome, etc, all have their own mesage that might be worded differently.

Author

Commented:
If I did not renew, how long after expiration would my site be secure?
Commented:
The site will always be secure.  An expired certificate will not break the encryption.  The certificate is only to tell a broswer that the site matches the site in the cert.  So it depends what you mean by secure.  It is now possible someone to masqerade as your site, since users will get a warning on the real site too.

Author

Commented:
I'm sorry for my complete lack of knowledge on this. Until the Thawte process is complete, if I monitor my site for any suspicious anything, my customers will be safe?

Commented:
Your site will be safe, always.  However i was simply pointing out the rare possibility that someone could set up a server just like yours, and claim to be your server, and the user wouldn't know the difference, because both sites would have a warning.

Author

Commented:
Thank you very much. I will award points shortly.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial