Glossary

SSL Certificate

An SSL certificate is a small file installed on a website's server that encrypts the connection between a visitor's browser and the site, shown to visitors as the padlock icon and "https://" at the start of the web address.

Why it matters

Without it, browsers actively flag a site as "Not Secure", a poor first impression that makes visitors hesitate before entering any contact details, let alone payment information. Google has also confirmed HTTPS as a ranking signal, so an unsecured site is at a small but real disadvantage in search.

For most small business websites today, an SSL certificate is a baseline expectation rather than an optional extra. Any properly built site should have one included from day one.

Common mistakes

  • Letting an SSL certificate expire, which can suddenly show visitors a security warning
  • Not realising a site lacks one until a visitor or browser flags it
  • Assuming SSL alone means a site is fully secure, when it only covers the connection, not every aspect of site security
  • Paying separately for something that should be included as standard with proper hosting

SSL Certificate FAQ

Do I have to pay extra for an SSL certificate?

It should be included as standard with a properly built and hosted website, so treat any quote that lists it as a costly add-on with some scepticism.

How do I know if my site has one?

Check the address bar for a padlock icon and "https://" at the start of the URL. If it says "Not Secure" instead, the certificate is missing or misconfigured.

Want this handled rather than just explained? Get a fixed-price quote with no sales call and no obligation.