Enter a domain and inspect its HTTPS certificate: who issued it, which names it covers and — most importantly — when it expires.
Popular free certificates (Let's Encrypt) live 90 days and renew automatically; paid ones usually a year.
Browsers show a full-page security warning and most visitors leave — worth monitoring in advance.
Subject Alternative Names — the list of domains the certificate is valid for, including wildcards like *.example.com.