SSL Certificates
SSL certificates, what they do and which kind your site needs
What SSL certificate do I need for my website?
An SSL certificate encrypts the connection between your visitors and your site and turns on HTTPS and the padlock. A standard domain-validated (DV) certificate is enough for most sites and is often free. Use a wildcard certificate to cover all your subdomains at once, and an organization or extended validation certificate when you need to prove your business identity.
What an SSL certificate does
An SSL (now technically TLS) certificate encrypts the data that travels between a visitor's browser and your website, so passwords, form entries, and payment details cannot be read in transit. It is what switches your address from http to https and shows the padlock in the browser. Modern browsers flag sites without it as not secure, and search engines treat HTTPS as a basic expectation, so every site that collects any information, or simply wants to look trustworthy, needs one.
Certificates differ in two ways: how much of your site they cover, and how strongly they verify who you are. A regular certificate secures a single hostname, such as www.yourdomain.com. A wildcard certificate secures the main domain and all of its subdomains (mail, shop, blog, and so on) with one certificate, which is convenient when you run several subdomains.
Validation levels and free versus paid
Validation level is the other axis. Domain validation (DV) only confirms you control the domain and is issued in minutes; it is the right choice for personal sites, blogs, and most small business sites. Organization validation (OV) checks that your business is real. Extended validation (EV) is the most rigorous check of your legal identity. OV and EV are aimed at larger organizations and stores that want to display a verified business name, and they cost more and take longer to issue.
Free certificates, issued by services built into many hosting control panels, are domain-validated and perfectly legitimate; for most sites a free DV certificate is all you need. Paid certificates add stronger validation, warranties, and sometimes support, which matters more for commerce and brands. Whatever you choose, set it to renew automatically, because an expired certificate makes browsers show a security warning that scares visitors away.
What to check
What to look for
- Every site needs HTTPS. Browsers flag http sites as not secure; an SSL certificate enables the padlock and protects data in transit.
- A free DV certificate fits most sites. Domain-validated certificates, often free in your host's panel, are enough for blogs and small sites.
- Use wildcard for subdomains. One wildcard certificate covers your main domain and all subdomains, instead of many separate certificates.
- Step up to OV or EV for business identity. Organization and extended validation prove your company is real; worth it for stores and brands.
- Automate renewal. An expired certificate triggers a browser security warning; auto-renewal prevents that scare.
Act on this
Tools to act on this guide
Each slot below is reserved for a host, registrar, or tool we would use ourselves. We are adding them as we vet them; nothing here is a paid placement.
Primary module to add a certificate.
DV, OV, EV, and wildcard side by side.
For sites running multiple subdomains.
Questions