System Administrators of Windows devices must resolve SSL (Secure Socket Layer), certificate and related issues quickly to maintain secure connections. A bad certificate on a site can lead to a host of issues — INCLUDING SITE DOWN/REVENUE STOPPAGE situations.

Here is a step-by-step tutorial is available here:

Identification of Certificate/SSL Issues. Recognizing specific issues such as browser security warnings, HTTPS failures, and certificate errors is critical in keeping business running efficiently.

Check Certificate Expired. Use the Certificates Snap-in MMC to review certificate validity periods and ensure they do not expire prematurely.

Confirm Certificate Authenticity. Confirm that the CA is trustworthy by verifying their Root Certificate against Trusted Root Certification Authorities.

Replace or Renew Expiring Certificates. In the event that certificates have become invalid, they can be renewed through their issuing CA. Furthermore, outdated or compromised certificates should be replaced with more modern ones in order to stay secure.

Check Certificate Chain. Verify that all intermediate certificates in your chain have been installed properly and are still valid.

Client/Browser Update. Upgrade client applications or web browsers to support new SSL/TLS cipher suites and protocols, providing optimal protection from cyber attacks.

Stop and Restart Services. After making changes to SSL/TLS configurations, restart web servers (e.g. IIS).

Utilize SSL/TLS Tools. Take advantage of online SSL/TLS tests to identify any areas of weakness in your SSL configuration.

Upgrade Intermediate Certificates. To avoid problems with trust validation, ensure all intermediate certificate chains have been updated. This will help eliminate potential gaps.

Consult Certificate Authority Customer Support. For any troubleshooting tips, consult with Certificate Authority’s customer support.