Last week I was doing a routine check on a CyberPanel server and noticed something that didn't add up. The panel's SSL status showed a clean "SSL Issued Successfully". Nothing to see, apparently. Except the certificate expiration date hadn't moved.
The browser was still serving a certificate that was about to expire.
That's the kind of mismatch that's easy to miss if you trust the panel's UI at face value — the message says success, the log (if you even check it) looks uneventful, and you move on. I didn't move on.
Checking what's actually served
The panel tells you what it thinks happened. What matters is what the server actually hands out to a browser. That's a one-liner away:
