A domain doesn't expire the way an SSL certificate does. When an SSL certificate lapses, visitors see a browser warning and your site still partially loads. When a domain expires, DNS resolution fails entirely. Your website goes down, your email stops delivering, every subdomain disappears, and every service attached to that hostname becomes unreachable — simultaneously, with no warning to anyone who depends on it.
This article covers what's actually happening right now, how long each recovery window lasts, and what the path back looks like depending on how far along the expiry timeline you are.
First: Confirm It's the Domain, Not the Certificate
The symptoms are nearly identical from the outside — site unreachable, connection errors — and the fix is completely different.
Check the domain registration status directly at WHOIS lookup or at your registrar. If the registration expiry date is in the past, you have a domain expiry problem. If the domain status shows anything other than clientTransferProhibited or active, the domain has moved into expiry processing.
A useful cross-check: if your SSL certificate still shows as valid in a TLS check but the site is unreachable, the certificate is fine — the domain isn't resolving. The SSL checker connects via the hostname; if it can't resolve the domain at all, that points directly at registration expiry rather than a certificate problem.
For more on why these two systems fail independently, the domain expiry vs SSL expiry post covers the distinction in detail.
The Expiry Timeline
Registrars handle expired domains in a sequence of phases. The fees and recovery options change at each boundary.
Grace period — 0 to ~30 days after expiry
Most registrars hold the domain in a grace period immediately after expiry. During this window:
- ✓The domain is unreachable — DNS has already stopped resolving
- ✓Renewal is still available at the standard annual registration price
- ✓No penalty fees apply
- ✓Log into your registrar dashboard and renew normally
This is the cheapest and fastest recovery path. The exact length varies by registrar and TLD — .com and .ca grace periods are typically 30 days, but verify at your registrar directly.
Redemption period — ~30 to ~75 days after expiry
If the grace period passes without renewal, the domain enters redemption. At this stage:
- ✓The domain is still held by your registrar and not yet released to the public
- ✓Recovery is possible but requires paying a redemption fee on top of the renewal cost
- ✓Redemption fees typically run $100–$250 USD depending on the registrar and TLD, charged in addition to the standard renewal price
- ✓Not all registrars surface this option clearly — you may need to contact support directly to initiate a redemption
The domain name and all its DNS records still belong to you during redemption. Once the fee is paid and the domain renews, DNS propagation begins and services restore — though propagation can take up to 24–48 hours depending on TTL values previously set.
Pending delete — ~75 to ~80 days after expiry
After the redemption period, the domain enters a pending delete phase lasting approximately five days. During this window:
- ✓The domain cannot be recovered by the previous owner
- ✓No fee will get it back
- ✓It is queued for release to the public
Released and available for registration
Once the pending delete phase completes, the domain drops and becomes available for anyone to register. Domain drop-catching services monitor these releases and register high-value names within seconds of them becoming available. Once this happens, recovering your original domain means either re-registering it at market price if it slips through uncaught, or negotiating with whoever acquired it — often at significantly inflated cost.
What's Broken and Why
Unlike SSL expiry, which only affects HTTPS connections, domain expiry breaks the hostname entirely:
- ✓Your website is unreachable — HTTP and HTTPS both fail because DNS has no record to resolve
- ✓Email stops delivering — MX records resolve through the same DNS zone; no domain, no mail routing
- ✓Every subdomain disappears —
api.yourdomain.com,mail.yourdomain.com,app.yourdomain.comall resolve through the same root - ✓Third-party services pointing at your domain fail — anything relying on your hostname as an authentication callback, webhook target, or CDN origin goes down simultaneously
This is the reason domain expiry causes disproportionate damage relative to SSL expiry. A single registration lapse is a total service failure, not a degraded one.
Immediate Steps
1. Log into your registrar and check which phase the domain is in
2. If in grace period: renew immediately at the standard price
3. If in redemption: contact registrar support to initiate redemption, confirm the fee, and pay it — don't wait, the window closes
4. If pending delete: the domain cannot be recovered; begin planning for a new name or set up monitoring on the old domain to catch if it drops uncaught
5. After renewal, verify DNS propagation with a WHOIS lookup before assuming services have restored
Why It Happened
The most common reasons a domain lapses despite auto-renew:
- ✓The payment method on file expired or was cancelled — renewal charges fail silently, and some registrars only send one notification before moving to grace
- ✓The account email address is outdated — registration emails go to whoever set up the account, often a former employee or a personal address nobody checks
- ✓Auto-renew was off on this specific domain — it's a per-domain toggle, not an account-wide setting, and domains added quickly don't always get it enabled
- ✓The registrar's notification went to spam
None of these surface until the domain stops resolving.
Monitoring Prevents the Entire Timeline
External domain monitoring checks your registration expiry date daily via WHOIS — the same public record that shows you where in the timeline you are — and alerts you at 30, 14, 7, and 1 day before expiry. The alert arrives when renewal is cheap and instant, not after DNS has already failed.
ExpiryPing monitors both domain registration expiry and SSL certificate expiry for every domain you add. No registrar credentials, no account access — WHOIS data is public. Setup is under five minutes. Free for up to 3 domains, paid plans from $19/month.
The grace period is where this is cheap and reversible. Redemption is expensive. Pending delete is irreversible. The only variable is whether you had 30 days of warning or zero.