DNS & Certificate Lifecycle Security Incident Runbooks

NGINX Continues Serving a Pre-Renewal TLS Certificate After Renewal

Confirm that automated certificate renewal succeeded on disk, validate NGINX configuration, and reload it safely so the renewed TLS certificate is served.