Home/Notes/certificate renewals: a field note from a bakery
certificate renewals: a field note from a bakery
9 Nov 2024
How a bakery deals with certificate renewals — and what usually goes wrong.
The problem: a registrar login nobody wrote down. The certificate chain breaks for a bakery.
The vendor promised a bakery that certificate renewals was handled. We verified: it was not. Trust but verify has saved more uptime than any product we have used.
We do not start with a platform when handling certificate renewals. We write down who types what, who gets the mail, and what must not get lost. That list is always shorter than a vendor pitch deck.
After the move, a registrar login nobody wrote down broke search indexing for a bakery. Google kept serving the old pages for another nineteen days.
The vendor portal had silently rotated the key for certificate renewals, but a bakery was still using the old one. Every outbound message bounced quietly.
When a bakery moved hosts, the outage was not the new box — it was a registrar login nobody wrote down. We keep TTL short the week of a move, then raise it once everything is stable.
Related notes
Tell us what you need.
Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.
hello@digitalserved.com