SSL/TLS Certificate (SSL Certificate)

Security Glossary - SSL/TLS

Definition: A digital certificate that authenticates a website's identity and enables an encrypted connection between a web server and a browser. SSL certificates contain the site's public key, the domain name it was issued for, the issuing certificate authority's signature, and validity dates.

Summary

Authenticates website identity and enables encryption
Issued by Certificate Authorities like Let's Encrypt or DigiCert
Contains public key, domain name, issuer signature, and validity dates
Free options available via Let's Encrypt with 90-day validity
Required for HTTPS - browsers flag HTTP sites as Not Secure

The Importance of SSL Certificate

An SSL certificate is the foundation of secure communication on the web. When a browser connects to a server with a valid SSL certificate, all data exchanged between them is encrypted. This protects sensitive information like login credentials, payment details, and personal data from being intercepted by attackers on the network.

Without a valid SSL certificate, browsers display prominent security warnings that drive visitors away. Google also uses HTTPS as a ranking signal, so sites without SSL certificates may rank lower in search results. Beyond SEO, an expired or missing certificate signals to users that the site operator does not take security seriously, which erodes trust.

For indie hackers and small businesses, free certificates from Let's Encrypt have eliminated cost as a barrier. The main risk now is letting certificates expire accidentally, which causes immediate downtime for HSTS-enabled sites and security warnings for all visitors.

How to Check

Use an SSL certificate checker to verify your certificate is valid, properly installed, and not close to expiring. The checker will show your certificate's issuer, expiration date, supported protocols, and whether the full certificate chain is correctly configured. Run a check after any server configuration change or certificate renewal.

What People Get Wrong About SSL Certificate

Myth: SSL certificates guarantee a website is safe to use

Reality: SSL only encrypts data in transit. A phishing site can have a valid SSL certificate. The certificate verifies the connection is encrypted, not that the site operator is trustworthy.

Myth: Paid SSL certificates provide stronger encryption than free ones

Reality: Free certificates from Let's Encrypt use the same encryption algorithms and key lengths as paid certificates. The difference is in identity validation level (DV vs OV vs EV), not encryption strength.

SSL Certificate FAQ

What is the difference between SSL and TLS?

SSL (Secure Sockets Layer) is the older protocol that TLS (Transport Layer Security) replaced. TLS is more secure and is what modern browsers actually use. However, the term 'SSL certificate' persists as a common name for certificates used with TLS connections.

Do I need an SSL certificate for my website?

Yes. All modern browsers flag HTTP sites as 'Not Secure,' which deters visitors. Search engines prefer HTTPS sites. Free certificates from Let's Encrypt make there no reason to skip it, even for simple static sites.