Archived Guidance: SSL/TLS Certificate Renewal and Verification
Before replacing an SSL/TLS certificate, confirm the required hostnames and keep the current certificate and private-key references available for rollback.
After installation, verify the served certificate chain, expiration date, hostname coverage, HTTPS redirects and the applications that depend on TLS.
