The certificate expired at two in the morning

• A

  A longer validity period, so renewal is needed less often

• B

  Pinning the certificate in clients so expiry is not checked

• C

  Automated renewal with monitoring that alerts well before expiry

• D

  Serving the site over plain HTTP as a fallback when the certificate fails