What is an SSL certificate?
An SSL certificate is commonly used to mean the certificate that enables a website to use HTTPS. Modern HTTPS connections use TLS, the successor to SSL. The familiar name remains, but the distinction matters when discussing security.
What the certificate does
A certificate helps a browser authenticate the server it is connecting to. Together with TLS, it enables an encrypted connection between the visitor and the website. This helps protect information in transit, such as a submitted contact form or login credentials.
HTTPS should be part of the basic setup of a business website, including pages that do not collect payments. Visitors should not have to switch to an unencrypted connection to browse the rest of the site.
What it does not do
A valid certificate does not prove that a business is trustworthy, prevent all attacks or make the application itself secure. Access permissions, software updates and secure handling of stored information remain separate responsibilities.
Keep it working
The certificate must cover the correct domain and remain valid. Renewal and website configuration therefore belong in the maintenance plan. Check that pages, images and other resources load correctly over HTTPS after changes.
Frequently asked questions
- Does an SSL certificate prevent every website attack?
- No. It supports an authenticated, encrypted connection; application security and maintenance remain necessary.