People often say SSL certificate, but modern websites generally use TLS to secure HTTPS connections.
Understand the terminology
HTTPS is HTTP carried over a protected TLS connection. A publicly trusted certificate allows browsers to verify the server’s identity for the domain and establish encryption.
Historically common “SSL” terminology remains in product names, although SSL protocols themselves are obsolete.
Use an appropriate certificate
Domain Validation certificates authenticate control of a domain. Coverage may be for a single name, multiple names or subdomains, depending on the certificate type.
A free trusted certificate can provide standard encryption; automation, installation support and operational needs may determine the service choice.
Remember what HTTPS does not fix
An HTTPS padlock does not prove that website content is truthful, server software is patched or the application is free from vulnerabilities.
Combine TLS with updates, access controls, backups, secure headers and application testing.
Practical decision checklist
- Valid TLS certificate and complete chain
- HTTP to HTTPS redirects
- No mixed-content resources
- Renewal alerts and security updates
How Orchidz Web Solutions approaches this question
A certificate enquiry should cover the actual hostname list and who will manage renewal. Orchidz approaches HTTPS as a deployment and maintenance requirement, not a claim that a website becomes entirely secure with one purchase.
For a discussion about this specific requirement, email ContactUs@OrchidzWebSolutions.com. Service arrangements and technical scope are confirmed during the enquiry process; articles are educational and are not a substitute for an agreed service specification.