Browsers mark websites without HTTPS as "Not secure", which discourages visitors from filling forms or paying. An SSL (more accurately TLS) certificate fixes this.
Types of certificates
- Domain Validated (DV): verifies domain control; suitable for most websites. Free options like Let's Encrypt are widely used.
- Organisation Validated (OV): verifies business identity as well; sometimes preferred by companies.
- Extended Validation (EV): more extensive checks; browsers no longer display it very differently.
- Wildcard: covers all subdomains of a domain.
Free or paid?
For most small and mid-sized business websites, a free DV certificate provides the same encryption strength as a paid one. Paid certificates may offer warranties, support or organisation validation.
Renewal
Certificates have limited validity and must be renewed. Free certificates are usually renewed automatically by the hosting control panel. Set up monitoring so you are alerted if renewal fails.
Common issues
- Mixed content warnings when some images or scripts load over HTTP
- Certificates not covering both the www and non-www versions
- Redirect loops after enabling HTTPS
After enabling HTTPS
Redirect all HTTP traffic to HTTPS, update internal links, and make sure Search Console and analytics use the HTTPS version.
FAQs
Does SSL help SEO?
HTTPS is a light ranking signal and essential for user trust.
Do we need SSL for a simple brochure site?
Yes, every website should use HTTPS.
What happens if SSL expires?
Visitors see a security warning and many will leave.
