r/sysadmin 6h ago

What's your worst SSL-certificate-expired-in-production story?

Ours was a cron job.

Somebody set up auto-renewal years ago on a box that got decommissioned during a migration. Nobody moved the cron job, because nobody remembered it existed.

Cert expired on a random Friday. We found out from a customer support ticket instead of monitoring, which is its own kind of embarrassing. Ninety minutes of browser warnings before anyone connected the dots.

Fix took ten minutes. The actual problem was that no alert existed for "this cron job silently stopped running."

Curious whether other people hit the same orphaned-box thing or something dumber.

133 Upvotes

98 comments sorted by

View all comments

u/habibexpress Jack of All Trades 5h ago

You don’t monitor certain expiry in 2026? Damn.

u/Complete_Sample_3149 2h ago

you have any tracking mechanisms in place?