What Is an SSL Certificate and Why You Need HTTPS

Complete guide to SSL certificates

By CloudPicked Review Team•Last updated June 15, 2026•8 min read

What is SSL
SSL types
Can you get free SSL
SSL and SEO
Install SSL
Renew SSL
What is mixed content
Wildcard SSL
FAQ

What is an SSL certificate

SSL (Secure Sockets Layer) or TLS (Transport Layer Security) is an encryption protocol protecting data between browser and server. Sites with SSL show https:// and a padlock icon.

Encrypts data between browser and server
Prevents man-in-the-middle attacks
Shows https:// and padlock icon
Google uses HTTPS as a ranking signal

How many types of SSL certificates are there

SSL divides into DV (Domain Validated), OV (Organisation Validated) and EV (Extended Validation), differing in verification level.

DV: domain only, issued in minutes, free via Let's Encrypt
OV: organisation verified, 1–3 days
EV: strictest verification, shows org name in browser
Wildcard SSL: covers all subdomains

What is free SSL from Let's Encrypt

Let's Encrypt is a Certificate Authority providing free DV SSL, auto-renewing every 90 days. Most hosts integrate it automatically.

Let's Encrypt: 100% free DV SSL
Auto-renews with certbot or DirectAdmin
Most hosts install it automatically
Sufficient for most websites

How SSL affects SEO

Google announced HTTPS as a ranking signal in 2014. Sites without SSL show a "Not Secure" warning in Chrome, increasing bounce rates.

HTTPS is an official ranking signal
Chrome shows "Not Secure" on HTTP sites
Visitors leave sites showing Not Secure
Google does not fully index HTTP content

How to install an SSL certificate

On hosts using DirectAdmin or cPanel, install SSL in 2–3 clicks or use AutoSSL which installs automatically.

DirectAdmin: SSL Certificates > Let's Encrypt
cPanel: AutoSSL works automatically
Verify https:// in browser after install
Also set up HTTP → HTTPS redirect

What happens when an SSL certificate expires

When SSL expires the site shows a major browser warning causing visitors to leave. Set auto-renew or check expiry every 60 days.

Let's Encrypt auto-renews every 90 days
Paid SSL: renew 30 days before expiry
Use SSL Labs ssllabs.com to check status
Set alerts in your monitoring tool

What is mixed content and how to fix it

Mixed content occurs when an HTTPS page loads resources such as images over HTTP, causing browser warnings and blocking some resources.

Use a plugin like Better Search Replace to fix URLs in WordPress
Check with Chrome DevTools > Console
Update database URLs to https://
Always use https:// when linking images or files

What is a Wildcard SSL certificate

Wildcard SSL covers the main domain and all subdomains at one level, such as *.yourdomain.com — cheaper than buying separate SSL for each subdomain.

*.yourdomain.com covers blog./ shop./ mail.
Does not cover sub-subdomains like a.blog.yourdomain.com
More expensive than single DV but cheaper than multiple certs
Many hosts include free wildcard via Let's Encrypt

Frequently Asked Questions

Is SSL different from HTTPS?

SSL/TLS is the encryption protocol; HTTPS is HTTP running over SSL/TLS. The two terms are often used interchangeably.

Is Let's Encrypt free SSL safe enough for e-commerce?

Yes. Let's Encrypt provides the same encryption level as paid SSL. The difference is only the level of organisation verification.

Is mixed content hard to fix?

In WordPress, use the Better Search Replace plugin to change http:// to https:// across the whole database — fixable in 5 minutes.

Does expired SSL put customer data at risk?

Yes, and the immediate effect is a browser warning that deters customers, creating both data and revenue risk.