An SSL certificate is the common commercial name for a certificate used to support secure HTTPS connections. Modern implementations use TLS, the successor to SSL.
The certificate helps authenticate the endpoint as part of establishing an encrypted connection. It does not establish that every statement, product or transaction on the website is trustworthy.
What does HTTPS protect?
TLS helps protect information in transit between the connected endpoints. This is different from guaranteeing how information is handled after it arrives.
A secure connection is one part of a wider implementation. Application permissions, storage and business processes still need appropriate design.
Why do certificates expire?
Certificates have validity periods and need renewal. Managed services may automate this, but ownership and monitoring still matter.
An expired or unsuitable certificate can create browser errors. The responsible team should know who handles renewal and how failures are detected.
Does the padlock prove a business is legitimate?
No. Connection security and business legitimacy are different questions. A fraudulent website can also use an encrypted connection.
Evaluate the organisation, offer and transaction independently. Do not use the existence of HTTPS as the sole reason to trust an unfamiliar business.
What happens during a domain change?
The certificate configuration must cover the intended names. Domain connection and DNS changes may be part of the process.
Check the actual published addresses, including the versions people are likely to use. A working staging address does not prove the main domain is configured correctly.
What should a website launch verify?
Confirm that intended pages load through HTTPS without browser warnings and that the site's links and resources use appropriate destinations.
Review redirect behaviour and certificate coverage. A launch checklist should include the whole route people follow rather than only one successful homepage request.
What should a hosting agreement explain?
Establish whether certificate provisioning, renewal and monitoring are included. Clarify what happens when an account or domain configuration changes.
The useful outcome is an operational responsibility that someone owns. A security-related feature should not remain an assumption between suppliers.
Further reading
For reference, see the supporting documentation. Explore related explanations of Domain name, Web hosting, DNS.
A practical example
Illustrative example: a managed website service handles certificate renewal, while the business retains domain ownership. During a migration, the team verifies certificate coverage and HTTPS delivery on the actual company addresses before considering the connection complete.
Why it matters
Understanding certificates prevents encrypted transport from being confused with complete website security. Clear ownership helps maintain reliable HTTPS delivery.
