richms:
I'm more shocked that they have allowed a SSL cert to expire on production.
It is quite common. From what I was told, you can't just renew a secure cert, a new one has to be installed prior to the old one expiring, and they don't send you a reminder either. So someone has to have it noted in their diary to install a new one prior to the old one expiring. As many are valid for 3 years, it is quite common for the person who installed the original one, no longer working for the company.