What Is an SSL Certificate? Why HTTPS Matters
The padlock icon in the address bar shows that the connection between your site and its visitor is encrypted. We explain how SSL/TLS works, the types of certificates, and how HTTPS affects your Google rankings.
An SSL certificate is a digital ID that encrypts the connection between a website and its visitor's browser. Sites with a certificate load over https://, and a padlock icon appears in the browser's address bar. The technology in use today is actually called TLS (the successor to SSL), but out of habit, people still call it "SSL."
What does SSL do?
- Encryption: Data such as passwords, card details, or messages entered into forms can't be read in transit. This is especially important on public Wi-Fi networks.
- Authentication: Visitors can be sure they've really connected to the right site.
- Integrity: Data can't be altered in transit; no one can inject ads or malicious code along the way.
How does HTTPS work?
When your browser connects to an https site, a quick "handshake" takes place:
- The server sends its certificate to the browser.
- The browser checks that the certificate was issued by a trusted authority and hasn't expired.
- The two sides agree on an encryption key that only they know.
- All communication from then on is encrypted with that key.
This happens in a tiny fraction of a second, and the visitor doesn't notice a thing.
Types of certificates
| Type | What's verified? | Who is it for? |
|---|---|---|
| DV (Domain Validation) | That you own the domain | Blogs, personal and business sites |
| OV (Organization Validation) | The domain + that the company exists | Corporate websites |
| EV (Extended Validation) | A detailed review of the company | Banks, large online stores |
Certificates also differ by coverage: single-domain, wildcard (*.example.com, covering all subdomains), and multi-domain certificates.
Is a free SSL certificate good enough?
Free DV certificates from organizations like Let's Encrypt provide the same encryption strength as paid DV certificates. For most websites, they're completely sufficient. Paid certificates usually differ in offering organization validation, a warranty, and support. On our web hosting plans, your site is served over https.
How HTTPS affects Google
Google has publicly announced that it uses HTTPS as a ranking signal. On top of that, browsers, led by Chrome, mark non-HTTPS pages as "Not secure." That warning can make visitors leave your site right away. In other words, SSL is essential for both security and visibility.
Mixed content errors
If your site loads over HTTPS but the padlock doesn't appear, it's very likely that some images, stylesheets, or scripts on the page are still loading over http://. The fix is to change those links to https:// or to relative paths (like /images/logo.png).
Frequently Asked Questions
Does an SSL certificate slow down my site?
No. On modern servers, the cost of encryption is very low. Technologies that come with HTTPS, such as HTTP/2, often even make sites faster.
What happens if my SSL certificate expires?
Browsers show a large security warning to visitors trying to access your site. Free certificates usually renew automatically; with paid certificates, you need to keep track of the renewal date.
Do simple sites without forms need SSL too?
Yes. Because of browser warnings, Google rankings, and the need to prevent data from being altered in transit, every website should use HTTPS.
Does SSL protect my site from being hacked?
No. SSL only protects the connection. You still need to keep your site's software up to date and use strong passwords.
You might also like
How a WireGuard or OpenVPN server with your own Turkish IPv4 address works, what happens after you pay, and ho...
Running your own VPN server is easier than it sounds. A step-by-step WireGuard setup on an Ubuntu 24.04 VPS, i...
The moment your server goes online, automated bots start scanning it. We walk you through, in order, the 10 es...