In plain English
It's the official ID a courier checks before handing over a package. The browser checks the certificate, sees your site is who it says it is, and only then opens the secure line.
Used in a sentence
“The SSL certificate renews itself every few months, so the padlock never lapses.”
“Our certificate expired over a weekend, and the browser warning scared customers off the booking page.”
In detail
A certificate is issued by a trusted authority after it checks you control the domain. Browsers trust those authorities, so when your site presents its certificate, the browser shows a padlock and sets up encryption. Certificates expire on a schedule, which is why automatic renewal matters.
Most good hosts now provide certificates free and renew them automatically. Paid certificates with extra checks on the business still exist, but for most small business sites the free, automatic kind is the right choice. The risk isn't the cost; it's a certificate quietly expiring.
Why it matters for your business
A missing or expired certificate puts a warning between your customers and your site.
- Enables the padlock and https
- Must be renewed, ideally automatically
- Usually included with good hosting
Easy to mix up
SSL is technically the old name; today's connections use TLS. People still say "SSL certificate", and it's the same thing that makes HTTPS work.
Related terms
HTTPS, Hosting and Domain name. Or browse the whole glossary.
