Expiry and Renewal Tracking Glossary
Plain-English definitions for the terms that come up when tracking domains, certificates, subscriptions, contracts, and licenses, plus answers to the questions we hear most often.
- ACME
- Automatic Certificate Management Environment, a protocol that lets servers request, validate, and renew TLS certificates from a certificate authority without manual steps. Most modern automated certificate renewal relies on it.
- Auto-renewal
- A setting or contract clause under which a domain, subscription, or agreement renews automatically at the end of its term unless it is cancelled. It prevents accidental lapses but can also lock in charges nobody intended to keep paying.
- Cancellation deadline
- The last date on which a subscription or contract can be cancelled or changed before the next term is charged or locked in. It is often earlier than the renewal date itself and is the date that actually needs a reminder.
- An organization trusted by browsers and operating systems to issue digital certificates confirming that a website or service controls its domain. Certificates are valid only for the period the authority sets at issuance.
- Certificate chain
- The sequence of certificates linking a server certificate back to a trusted root through one or more intermediate certificates. Any certificate in the chain expiring can cause trust errors even when the server certificate itself is current.
- Domain lock
- A registrar setting, sometimes called a transfer lock, that prevents a domain from being moved to another registrar until the lock is removed. It protects against unauthorized transfers but does nothing to prevent expiry.
- Drop catching
- The practice of registering a desirable domain the moment it is released after expiry, usually with automated services. It is the main reason a fully deleted domain is rarely recoverable by its former owner.
- Escalation
- Routing a reminder to a second person or a manager when the original owner has not acted by a set date. It is the safeguard against a reminder that was delivered but ignored.
- Evergreen clause
- A contract provision that renews the agreement automatically for successive terms unless one party gives notice within a defined window. Also called an automatic renewal clause, and common in leases, vendor agreements, and managed services.
- Expiry date
- The date on which a domain, certificate, license, or agreement stops being valid unless renewed. For contracts, the effective deadline is often earlier because of a notice window.
- Grace period
- A window after a domain's expiry date during which the original registrant can usually still renew at the normal price. Its length varies by registrar and by extension, and some offer none, so it should never be relied on.
- Lead time
- The interval between when a reminder fires and the deadline it refers to. Good lead times are scaled to how long the required action takes, including internal approvals, payment, and any formal notice.
- License true-up
- A periodic reconciliation, common in per-seat software agreements, in which actual usage is compared with what was licensed and the customer pays for any excess. True-up dates are contractual deadlines and belong in the same calendar as renewals.
- Maintenance renewal
- The annual fee that keeps support and updates active on a perpetual software license. Letting it lapse usually does not stop the software from running, but it can forfeit updates and make later reinstatement more expensive.
- Notice window
- The period before a contract's term end during which written notice of non-renewal must be delivered to avoid automatic renewal. Missing it typically commits you to another full term.
- Perpetual license
- A software license granting the right to use a specific version indefinitely, usually paired with optional annual maintenance. The license itself does not expire, but maintenance, support, and compliance obligations can.
- Redemption period
- A phase after a domain's grace period ends during which the registrant can still recover it, usually for a substantially higher fee than a normal renewal. Once it ends, the domain is queued for deletion and public release.
- Registrant
- The person or organization listed as the owner of a domain name. Keeping registrant contact details current matters because renewal notices and recovery processes depend on them reaching a real person.
- Registrar
- A company accredited to sell and manage domain registrations on behalf of registrants. The registrar is where renewals, auto-renew settings, contact details, and payment methods are managed.
- Registry
- The organization that operates a top-level domain and maintains its authoritative database. Registrars register domains with the registry, and the registry sets rules such as grace and redemption periods for that extension.
- Renewal owner
- The named person responsible for deciding and acting on a specific expiry when its reminder fires. Every tracked item should have one, plus a backup for when the owner is unavailable or has left.
- Renewal term
- The length of time a domain, subscription, or contract runs for after each renewal, such as one year. Longer terms reduce how often you must act but can lock in prices and commitments you may not want.
- Seat-based licensing
- A software pricing model in which cost is tied to the number of users or devices. Seat counts drift between renewals, which makes the renewal date a natural moment to rightsize the plan.
- Single source of truth
- One agreed location, such as a shared calendar, a maintained spreadsheet, or a reminder service, where every expiry is recorded and updated. It replaces scattered vendor notices and personal memory.
- SSL/TLS certificate
- A digital certificate that enables encrypted connections and confirms a server's identity. SSL is the older protocol name and TLS is the modern one, but the term SSL persists in everyday use. Certificates carry fixed validity periods and must be renewed before they end.
- Subscription audit
- A periodic review of every recurring charge to confirm who uses it, whether it is still needed, and when it renews. Done before renewal dates rather than after, it prevents paying for another term of unused tools.
- Trial conversion
- The point at which a free trial ends and automatically becomes a paid subscription, usually because a payment method was collected at signup. Tracking the trial end date is the only reliable way to prevent unintended charges.
- WHOIS
- A public lookup system for domain registration records, including the registrar and expiry date. Many contact details are now redacted for privacy, but registrar and expiry information usually remain visible and are useful for verifying a domain's status.
- Wildcard certificate
- A TLS certificate that covers all subdomains under a single domain. Convenient to manage, but because many services share it, its expiry affects all of them at once.
- Zombie subscription
- An informal term for a recurring charge that continues after the tool has stopped being used, often because the original user left, changed roles, or simply forgot it existed.
Questions people ask
What actually happens when a domain name expires?
The exact sequence depends on the registrar and the extension, but the general pattern is that the domain stops resolving, then enters a grace period where the owner can usually renew at the normal price, then a redemption period where recovery costs more, and finally deletion and public release. Once released, it can be registered by anyone, and expired domains with traffic are often picked up within moments.
How long do I have to recover an expired domain?
It varies. Grace periods differ by registrar and are not guaranteed for every extension, and redemption periods are set by the registry. Treat any window as a last resort rather than a plan, and renew before expiry so the question never comes up.
Why do SSL certificates expire at all?
Limited validity is a deliberate security measure. It limits the damage if a private key is compromised and forces periodic re-verification that the requester still controls the domain. Maximum lifetimes for publicly trusted certificates have been shortened several times over the years, which is why automation has become essential.
How often should I review my subscriptions?
A full audit once or twice a year works for most small teams, timed ahead of the largest annual renewals. In between, review any subscription whose renewal or cancellation deadline is approaching, and add new subscriptions and trials to the calendar the day they start.
What is the difference between a renewal date and a notice deadline?
The renewal date is when the new term begins. The notice deadline is the last day you can tell the vendor you do not want it to begin, and it can fall weeks or months earlier. For any contract with a notice window, the notice deadline is the date that needs the reminder.
Should I turn on auto-renew for everything?
Turn it on for things you cannot afford to lose, such as your primary domains and certificates, and treat it as a backstop rather than a plan, since it fails silently when a payment method expires. Be more cautious with subscriptions and contracts, where auto-renew mostly protects the vendor's revenue rather than your interests.
How many reminders should each expiry have?
Two or three is usually right: an early heads-up for planning and budget, a working reminder when the action should begin, and a final escalation to a backup person if the item is still open close to the deadline. One reminder the day before is almost never enough for anything that involves another person.
Who should own expiry tracking in a small company?
One person should own the system, meaning the calendar or service and the review rhythm, while individual items can have different owners depending on who makes the decision. Operations, finance, or an office manager often fits the role. What matters is that it is explicit, and that ownership is reassigned the same week someone leaves.
What should I do when the person who managed our domains leaves?
Before they go, get a list of every domain, registrar, and account, and move any domain held under a personal account into a company-controlled one. Update registrant and billing contacts to shared company addresses, confirm payment methods, and reassign every reminder to a new owner. Doing this at offboarding is far easier than doing it after a lapse.
Can I track contracts and licenses in the same place as domains and certificates?
Yes, and you should. The mechanism is identical for all of them: a known date, a required action, and a consequence for being late. Keeping them in one calendar means one review covers everything, and it stops engineering-owned licenses and finance-owned contracts from living in separate silos.
Do free trials really convert to paid plans without warning?
Many do, particularly when a payment method was required to start the trial. Some vendors send a reminder before conversion and some do not, and the reminder that is sent may go to whoever signed up rather than whoever pays the bill. Setting your own reminder on day one is the only dependable safeguard.
Is a spreadsheet good enough for tracking expiries?
As an inventory, a spreadsheet is excellent and often the right first step. As a reminder system, it only works if someone opens it on a reliable schedule. Once the list grows past a few dozen items or more than one person needs to act, move the dates into something that sends alerts and escalates on its own.