To make sure that your website is continuously secured,
you need to timely renew the installed SSL/TLS certificate.
The SSL It! extension can help you with that.
SSL It! automatically renews free SSL/TLS certificates
from Let’s Encrypt and DigiCert
30 days in advance of their expiration.

SSL It! cannot automatically renew paid SSL/TLS certificates.
However, you can:
- Reissue them manually.
- Have SSL It! automatically replace expired SSL/TLS certificates
with free ones from Let’s Encrypt.
To reissue paid SSL/TLS certificates:
Go to Websites & Domains > your domain
secured with a paid SSL/TLS certificate
that is going to expire > SSL/TLS Certificates.Click Reissue Certificate.
Then you will be automatically redirected to Plesk Online Store.Fill in your address, payment information, and then buy the certificate.
Go back to Plesk (use the Back button in your browser).
Processing the payment takes some time.
To update the payment status, click Reload.
Plesk automatically updates the payment status once per hour.
Once the payment has been processed, click Fill In Required Data.

Fill in the required contact information
and then click OK.Plesk now automatically creates a certificate signing request (CSR)
and then receives and installs the SSL/TLS certificate.
It may take some time depending on the type of the SSL/TLS certificate.
You can update the SSL/TLS certificate status manually
clicking Reload or you can just wait until Plesk does it automatically
(Plesk checks the SSL/TLS certificate status once per hour).
To automatically replace paid expired SSL/TLS certificates with free ones from Let’s Encrypt:
- Go to Websites & Domains > your domain secured with a paid SSL/TLS certificate
that is going to expire > SSL/TLS Certificates. - Turn on “Keep websites secured”.
Now when your paid SSL/TLS certificate expires,
SSL It! automatically issues a free SSL/TLS certificate from Let’s Encrypt
to secure domains, subdomains, domain aliases,
and webmail belonging to the subscription.
It should happen no later than one hour
after the SSL/TLS certificate expires.