IT Glossary
What is an SSL Certificate?
The website's digital ID card: it proves the domain's identity to the browser and switches on encryption — the padlock in the address bar.
Picture a loyal customer opening your website and meeting a full-screen red warning instead of your homepage: that is what an expired SSL certificate looks like from the outside, and it is among the most avoidable incidents in IT. The certificate itself (technically TLS today — the old name stuck) is a cryptographic document doing two jobs: proving to the browser that the server genuinely represents your domain, and starting the encryption that makes traffic unreadable to eavesdroppers — together producing the padlock and the https in the address bar. What buyers should know is mostly commercial. The real cost is zero for the standard need: Let's Encrypt issues fully valid, auto-renewing certificates used by hundreds of millions of sites, and any decent host includes them by default. Paid certificates keep their meaning only in niches such as organization validation, where the certificate also attests the legal entity behind the domain; the encryption is identical either way, so selling small firms expensive certificates "for better security" is billing on misunderstanding. The failures that genuinely hurt are administrative: renewals that break silently, subdomains left uncovered, and mixed content that spoils the padlock — all preventable with expiry monitoring that takes minutes to configure. A free one-minute health check exists too: the Qualys SSL Labs test grades your configuration, and anything below an A calls for configuration work, not a bigger certificate budget.
Let’s talk about your project
Message us on WhatsApp or send an email — you talk directly to a developer.
office@northdan.com · +40 752 070 247
Why it matters for your business
Visitor trust kept intact
A valid padlock is checked instinctively; the red expired-certificate warning scares away even loyal customers — proper administration prevents exactly that scene.
Full encryption at zero cost
Modern free certificates provide the same encryption as any paid option — spend the budget on correct configuration, not expensive paperwork.
Prerequisite for everything that matters
Payments, GDPR-compliant forms, Google rankings, modern APIs — all assume working HTTPS; a healthy certificate is the invisible infrastructure of every conversion.
Frequently asked questions
Free or paid certificate — what is the actual difference?
In encryption: none — algorithms and protection are identical. What differs is what gets attested: the free kind (DV) validates control of the domain, sufficient for the vast majority of sites; paid OV/EV also attests the legal organization (relevant in finance and corporate contexts where partners require it) and comes with support and warranties. For the typical company site, free with automatic renewal is the correct choice.
How do we prevent a surprise certificate expiry?
Three cheap layers: automatic renewal configured and confirmed to have run successfully at least once, independent monitoring with an alert a couple of weeks ahead (free uptime tools include it), and a named owner — because hosting or DNS changes are what silently break renewal mechanisms. An expired certificate is 100% preventable, which makes it the most embarrassing downtime there is.
The browser says the connection is not secure even though we have a certificate — what can it be?
The usual suspects, in order: the certificate expired after a failed automatic renewal; wrong coverage (issued for www but accessed without it, or a subdomain missing); mixed content (an https page loading images or scripts over http); or an incomplete certificate chain on the server. All are diagnosed in a minute with an online SSL test — and fixed through configuration, not spending.
Let’s talk about your project
Message us on WhatsApp or send an email — you talk directly to a developer.
office@northdan.com · +40 752 070 247