An SSL certificate turns http:// into https:// and shows the padlock in the browser. In 2026 it is not optional: browsers label unencrypted pages as "Not secure", search engines rank them lower and payment providers refuse to work with them. The good news is that getting one takes minutes.
What an SSL certificate actually does
It encrypts everything between the visitor and your server. Passwords, card numbers and forms cannot be read on public Wi-Fi or by anyone in between. It also proves that the visitor is talking to your real server and not a copy, which is the basis of trust online.
The main types
- Domain validated (DV) — issued in minutes, perfect for most sites.
- Organisation validated (OV) — your company is verified and shown in the certificate details.
- Extended validation (EV) — the strictest check, used by banks and large brands.
- Wildcard — one certificate for every subdomain of your domain.
Compare the options on our SSL page. Sites hosted with HostiGuard include a free basic certificate that renews itself.
How to install it
On shared hosting, open cPanel, go to SSL/TLS and paste the certificate, the private key and the CA bundle. On a VPS, place the files in your web server configuration and reload it. Then force HTTPS so every old link redirects to the secure version. Test the result with any online SSL checker and fix mixed-content warnings by updating image and script URLs.
Keep it valid
Certificates expire after one year. Put the renewal date in your calendar or let auto-renew handle it. An expired certificate shows a full-screen warning that scares visitors away in seconds. Set a reminder a month ahead and check the expiry date of every subdomain, not only the main site. With a paid SSL certificate you also get a warranty and a site seal that increases conversion on checkout pages.
