Before changing a live website's certificate or security configuration:
- Identify the exact domain or service being changed.
- Record the current working state and relevant settings.
- Confirm a recoverable backup exists when the change can affect website files or configuration.
- Save any private key or certificate material that must be retained.
- Make one logical change at a time.
- Test the website from a fresh browser session.
- Re-enable any protection that was disabled only for troubleshooting.
A controlled change is easier to reverse and troubleshoot than several simultaneous security changes.
