Featured Products
Hosting Solutions
Proxy, IPs & VPN
Featured
Community
Security & Hosting
SSL and TLS
An SSL certificate turns on HTTPS and encrypts the connection to your site. Here is what it protects, which certificate type to choose, and how to fix the errors that come up.
6 chapters on certificates, HTTPS and common errors
An SSL (or TLS) certificate encrypts the connection between a visitor's browser and your server. Once it is active, the address bar shows a padlock and the site loads over https:// instead of http://.
Encryption protects anything sent over that connection, such as passwords, form entries and payment details, so it cannot be read if intercepted.
Key points
Certificates differ in what is checked before they are issued. Domain validation (DV) only confirms you control the domain, and is issued in minutes.
Organisation validation (OV) also checks that your business exists, which takes longer. Extended validation (EV) adds a more thorough check of your organisation, and shows your verified business name in the certificate details.
Key points
A wildcard certificate covers a domain and all its subdomains on the same level, such as shop.example.com and blog.example.com, with one certificate.
A multi-domain certificate covers several separate domains instead, which suits a business running more than one website.
Key points
Free SSL is enough to get the padlock and encrypt a typical site. Cloudoora includes free SSL on Premium Shared, WordPress and Turbo-Boosted hosting plans.
A paid certificate adds a verified business identity (OV or EV), which suits a site that wants to show that identity, such as an online shop. Free vs paid SSL certificates
Key points
Once a certificate is installed, update any internal links and set your site to redirect every http:// request to https://, so visitors and search engines always land on the secure version.
After the switch, check the padlock shows on every page, not only the homepage.
Key points
Mixed content happens when a secure page still loads an image, script or style over plain http://; browsers block or flag it. An expired certificate shows a warning until it is renewed.
A name mismatch happens when the certificate does not cover the exact domain or subdomain being visited, often after adding a subdomain without a matching or wildcard certificate.
Key points
Why it matters
Logins, forms and payment details cannot be read if the connection is intercepted.
Browsers mark sites without HTTPS as not secure.
Search engines such as Google use HTTPS as a ranking signal.
Related
Which one fits your site.
Certificate options when you add a subdomain.
Choosing a certificate for a small business website.
Securing a store that takes payments.
How HTTPS affects search rankings.
Compare certificates and validation levels.
FAQ
It encrypts the connection between your website and its visitors, so passwords and payment details cannot be read in transit. Browsers show a padlock and https:// for sites that have one.
They differ in what is checked before issuing. DV checks domain control only. OV also checks your business. EV adds a more thorough check and shows your verified business name.
Only if you run several subdomains on one domain and want them all covered by a single certificate.
For most sites, yes. Cloudoora includes free SSL on Premium Shared, WordPress and Turbo-Boosted hosting plans. Free vs paid SSL
A secure page is still loading an image, script or style over plain http://. Update those links to https://.
The certificate does not cover the exact domain or subdomain being visited, often after adding a subdomain without a matching or wildcard certificate.
Search engines such as Google use HTTPS as a ranking signal. SSL and SEO
Free SSL is included on Premium Shared, WordPress and Turbo-Boosted hosting.
