What is SSL Certificate / HTTPS?

SSL stands for Secure Sockets Layer (technically now TLS, Transport Layer Security, its successor, but "SSL" is still the common term). The certificate encrypts the connection between a visitor's browser and your web server, preventing third parties from intercepting transmitted data.

The visual signal of SSL, the padlock icon and "https://" prefix in the browser address bar, has become a basic trust signal for website visitors. Browsers like Chrome now label sites without SSL as "Not Secure," which significantly reduces visitor trust and increases bounce rate.

For small businesses, HTTPS is no longer optional. Google officially confirmed HTTPS as a ranking factor in 2014. Sites without SSL rank below equivalent sites with SSL. More practically, any site collecting contact form submissions, email addresses, or payment information must use HTTPS to protect that data in transit.

SSL certificates are free through Let's Encrypt and are provided at no cost by most web hosting platforms. Modern hosting services like Vercel automatically provision SSL certificates for all custom domains. There is no longer a cost argument for not having SSL.

Common SSL-related issues include: mixed content warnings (when an HTTPS page loads some resources, images, scripts, over HTTP), certificate expiration (certificates must be renewed, typically annually), and misconfigured redirects that do not properly enforce HTTPS on all pages and subdomains.

A website audit should verify that HTTPS is properly configured, that all HTTP traffic is redirected to HTTPS with a 301 redirect, that no mixed content warnings appear in the browser, and that the SSL certificate is valid and not near expiration.

Relevant services from FabBuilds

Related terms