You’ve surely seen the padlock in the browser and addresses starting with https. Behind it sits an SSL certificate. But what is it really, why does your website need one — and how do you get it? Here’s a straight explanation.
What is an SSL certificate?
An SSL certificate (today usually TLS) is a small digital file installed on your server. It does two things: it encrypts the traffic between the visitor’s browser and your website, and it proves the site is who it claims to be. The result is https in the address and the padlock in the browser.
What it does — and why you need it
- Security: passwords, forms and payment details are sent encrypted — no one can grab them in transit.
- Trust: without https the browser warns “Not secure” — most visitors bounce immediately.
- SEO: Google uses https as a ranking signal and prioritizes secure sites.
In short: a website without SSL looks broken and untrustworthy today — and loses both visitors and ranking.
Types of SSL certificate
- DV (Domain Validation): validates that you own the domain. Enough for most sites — and often free.
- OV/EV (Organization/Extended Validation): also validates the company behind it. Used by banks and e-commerce that want to show more trust.
- Wildcard: covers all subdomains (blog.yoursite.com, shop.yoursite.com) with one certificate.
How do you get an SSL certificate?
The easiest way: a good host sets it up for you automatically. Services like Let’s Encrypt issue free DV certificates that renew themselves. With a serious provider, SSL should be on by default — you should never have to fiddle with it manually.
Common SSL mistakes to avoid
- Expired certificate — if it doesn’t renew automatically the site stops working. Auto-renewal is a must.
- Mixed content — the page loads over https but images/scripts over http. The padlock disappears. Make sure everything goes over https.
- No redirect — http must 301 to https, otherwise the site exists at two addresses.
In short
An SSL certificate encrypts your site and gives you https, the padlock and better ranking — and today it’s a given, not an option. At Kepler’s Managed WordPress SSL is on by default with automatic renewal, and our whole security and data-residency model is built for Swedish, EU-sovereign operations.