The idea
An SSL certificate is a small data file that uses a cryptographic key to tie the identity of a website owner to the website. It does two jobs:
- It proves the identity of the site, so visitors know they reached the real site.
- It encrypts the data between the browser and the web server, so nobody in between can read it.
(The newer, safer protocol is called TLS, but the name "SSL certificate" is still used.)
What visitors see
When a site has a valid certificate:
- The address starts with
https://instead ofhttp://. - The browser shows a padlock icon.
The connection between the browser and the server is encrypted. Sensitive information, such as passwords and card numbers, is protected on its way.
Browsers mark sites without a certificate as "Not secure". This can scare visitors away.
Why you need one
- Security. Protects logins, forms and payments.
- Trust. The padlock shows visitors that your site is safe.
- SEO. Google prefers HTTPS sites.
- Requirements. Online shops and many services require it.
- Modern features. Some browser features work only on HTTPS.
Types of SSL certificates
By validation:
- Domain Validated (DV). Proves control of the domain. It is quick and cheap. Free certificates like Let's Encrypt are DV.
- Organization Validated (OV). Also checks the organization.
- Extended Validation (EV). The strictest check of the company.
By coverage:
- Single domain. One host name.
- Wildcard. One domain and all its first-level subdomains (
*.example.com). - Multi-domain (SAN). Several different domains in one certificate.
How to get one
- Many hosts, including Hostvento, offer free SSL (for example AutoSSL in cPanel).
- Or buy a certificate from a certificate authority, create a CSR on your server and install the certificate.
- Redirect HTTP to HTTPS and renew the certificate before it expires (free ones renew automatically).
Quick recap
- An SSL certificate encrypts the traffic of your site and proves its identity. Look for
https://and the padlock.