https://shipreadyai.dev/learn/verify/certificate-expiry

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Certificate expiry date

Whether the certificate is close to expiring. A normal request proves the certificate is valid right now, and the runtime this check uses cannot read the expiry date from that request.

## Why a check from outside cannot see it

A request proves the certificate is valid at the moment it is made. The date it stops being valid is inside the certificate itself, and the runtime this check runs on hands back the answer without handing back the certificate.

## How to check it yourself

1. Run openssl s_client -connect yourdomain.com:443 -servername yourdomain.com and read the notAfter date.
2. Or open the padlock in your browser and read the same date there.
3. Put a reminder in your calendar three weeks before it, even when renewal is automatic.

## What a Launch Review does instead

A reviewer reads the certificate directly, notes the expiry date, and checks that renewal is automatic and monitored.