Expired .pt domain and SSL: website and email offline in a day

It costs the whole day, from the first hour. When the paid term ends, the .pt stops responding on the internet. Website and mailboxes go down together, and whatever clients and suppliers send in that window may simply be lost.

The .PT rules give a second chance, but it costs money and the domain stays inactive:

1. Up to the last paid day: renew at the normal price.
2. In the following 30 days: you can still recover the name, at an extra cost; throughout this period the domain is inactive.
3. On day 31: the name is deleted and anyone can register it.

There is no phase in which everything keeps working while you decide. And the last step is the worst: a third party holding your name can set up fake emails in your company's name. We show how that scam works in the article on altered invoices and email fraud.

Most boards do not. Under the rules of Associação DNS.PT, the body that manages the .pt extension, whoever is listed as registrant has exclusive, renewable use of the name. Only that person or entity decides to renew, change or transfer it.

In the audits we carry out, names turn up registered to people no longer at the company:

• Someone who left Handled the website "some year or other" and the registration stayed with them.
• The agency behind the first website Registered it in its own name and never transferred ownership.
• The previous IT provider Kept the access when the contract ended.

The result: the brand runs on a name the company does not control. A renewal notice sent to a mailbox nobody opens is enough to switch it off.

.PT also separates three roles. The registrant is the owner. The managing entity, usually a registrar, maintains the registration. The technical contact administers the DNS zone. The last two can be external partners; the first must always be the company. Changing IT partner? Check this before signing, as we explain in the guide to switching IT partner without losing control.

Because in 2029 each certificate will have to be replaced around eight times a year. The SSL certificate is the padlock in the browser: it confirms the site is yours and encrypts the traffic. Its maximum validity is set by the CA/Browser Forum, which brings together certificate authorities and browser makers. In April 2025, the forum approved this schedule of reductions:

At this pace, only automatic renewal is viable. And automation also fails silently, so someone has to watch over it.

One more warning: since 4 June 2025, Let's Encrypt, one of the most popular no-cost certificate authorities, no longer sends expiry reminder emails. Anyone who relied on them lost their last safety net.

One wrong record is enough. Think of DNS as the directory that tells the internet where the website lives and where mail should go. MX records point to the mail server. SPF, DKIM and DMARC vouch to other servers that your messages are legitimate, cutting out spoofing and spam-folder deliveries.

Whether on managed Microsoft 365 or another platform, mail depends on these records. A careless move of the website's hosting can divert or block every message, and nobody notices straight away. The rule: whoever changes DNS must know the full configuration and document every change. The most common mistakes are in what fails in Microsoft 365 email security.

Seven. If your provider does not give you this in writing, the risk is still yours:

• Domain map All of them, including brands and old names, with registrant, registrar and expiry date.
• Verified registrant The company, with a corporate mailbox as the contact, never a personal one.
• Auto-renewal Switched on, with a payment method that does not expire.
• Certificate map Validity and renewal method for each one.
• DNS copy MX, SPF, DKIM, DMARC and every other record, documented.
• Two alerts per deadline At 30 and 7 days, to more than one person.
• Continuous testing The site responds and the certificate is valid.

We treat a domain as we treat a critical server. Every name and every certificate goes into the NOC and alert monitoring: there is an alarm before the deadline and a designated engineer to act. This monitoring is included in all IT Unlimited plans. Those who choose the IT Unlimited Premium plan also get unlimited on-site support.

Proof in the field. In 2019, PTR Pharma Consulting entrusted DataRoad with hosting its corporate website and email, within an annual IT Unlimited contract that covers the rest of its infrastructure. See how we manage PTR Pharma.

At Boost Portugal, website hosting and domain registration sit with a single partner, alongside remote monitoring and availability reports. Read the Boost Portugal case. One owner, one inventory, zero missed dates.

We map domains, certificates and DNS, confirm registrants and dates and leave the alarms active. Request a no-commitment proposal.

More than 10 workstations · support contract · remote, on-site and telephone support. +351 211 459 950 * · sales@dataroad.pt

*Call to a Portuguese landline.

• Associação DNS.PT.pt domain registration rules: pt.pt
• CA/Browser Forum: Ballot SC-081v3, approved on 11 April 2025: cabforum.org
• DNSimple: SSL validity dates from 2026 to 2029: support.dnsimple.com
• Let's Encrypt: end of expiry notifications: letsencrypt.org