Start with the right checks.
A certificate warning needs investigation. It does not prove the business was hacked, and it should not be dismissed just because the site used to work.
What to do next.
Record the complete website address, exact warning and time it occurred.
Check whether the warning affects the main domain, www address or only one page.
Ask the person managing hosting to check the domain connection and certificate status. For Framer sites, certificate management is automatic after a correct domain connection.
Have the responsible administrator review recent domain changes. Avoid replacing records from a generic online example.
Check the result.
The intended website opens over HTTPS at the correct address without the warning on the affected device and another connection.
Stop and get help if…
The browser reports a deceptive site, the address is unfamiliar, or the warning persists. Keep visitors on another verified contact route while support investigates.