The Philippine National Computer Emergency Response Team (CERT-PH) issued an advisory emphasizing the importance of maintaining up-to-date SSL certificates for all government websites and online portals. The advisory highlights the critical role of SSL certificates in ensuring online security and user privacy and urges all government entities to take this matter seriously. CERT-PH released the advisory after MB Technews reported a government website with an expired SSL certificate where users are asked to log in to process payment. However, the SSL certificate of NSW expired nine years and seven months ago, making it impossible for users to access the website through modern web browsers like Chrome, which blocks insecure websites SSL (Secure Sockets Layer) certificates are digital certificates that authenticate a website's identity and establish encrypted connections between users' browsers and the websites or portals they visit. These encrypted connections protect sensitive information, such as personal data and financial information, from interception and unauthorized access by third parties. Hackers can exploit expired SSL certificates in several ways. Expired certificates leave websites vulnerable to man-in-the-middle attacks, where cybercriminals intercept the communication between the user and the website, potentially gaining access to sensitive information. Additionally, expired certificates can lead to a false sense of security for users, as they may continue to trust a website with an expired certificate without realizing the potential risks. However, SSL certificates come with expiration dates. If not updated, they can create security vulnerabilities on websites, making them more susceptible to cyber attacks, such as man-in-the-middle attacks and data breaches, and compromising the privacy and security of users. CERT-PH recommends that all government entities review their SSL certificates to ensure they are up-to-date. If an SSL certificate is found to be expired or close to expiration, the necessary steps should be taken to renew it as soon as possible. CERT-PH reminds everyone that maintaining up-to-date SSL certificates is crucial in protecting organizations and users from cyber threats. CERT-PH urges all government organizations to prioritize updating their SSL certificates regularly to ensure online security and privacy for their users.