Umm actually, best practice is to enable HSTS so the entire website basically crashes for everyone when this happens because the security of the connection is no longer guaranteed by PKI