You’ll need to buy a new SSL. When your SSL certificate expires, it’s out of commission — you can’t “extend” it. Instead, you’ll need to replace it with a new SSL certificate, also called a “renewal” SSL certificate.

There are two main reasons why SSL certificates must be replaced every one year:

1. A new certificate ensures that the encryption used is up to the latest security standards.

2. It’s more difficult for hackers to compromise a key if it’s continually replaced.