Between roughly 2025-07-30 21:27 UTC and 2025-07-31 07:27 UTC, hex.pm, diff.hex.pm, and preview.hex.pm ran with expired SSL certificates and were inaccessible over secure connections. The root cause was reliance on a discontinued external certificate renewal service, with response delayed by misconfigured PagerDuty and on-call gaps; Hex has since added automated renewal monitoring, daily expiration checks, and improved alerts.