HTTPS uses TLS to protect data while it travels between a visitor's browser and your website. Hosting interfaces often call the certificate an “SSL certificate”, although modern encrypted connections use TLS.
What a certificate does and does not prove
A valid certificate helps the browser authenticate the domain it connected to and encrypt that connection. It does not prove that a business is trustworthy, remove malware, secure a weak password or protect a vulnerable application. Keep the website software and account access secure as well.
Before enabling HTTPS
- Confirm that the domain and required hostnames point to the correct hosting service.
- Check certificate issuance and renewal in your hosting control panel. If validation fails, review the reported error before changing DNS.
- Test the site over HTTPS, including forms, logins, images and payment callbacks.
- Update the site's configured address and internal links. Redirect the HTTP version to its HTTPS equivalent after testing.
- Check for mixed content, where a secure page still requests insecure resources.
Use the certificate status and instructions supplied for your account. Features such as AutoSSL depend on the hosting configuration. A browser certificate warning should be investigated rather than bypassed or hidden from visitors.
HTTPS and search visibility
HTTPS supports a secure visitor experience, but a certificate alone does not guarantee higher rankings. Useful content, crawlable pages and a consistent preferred URL still matter. When switching addresses, keep redirects, internal links, sitemap URLs and canonical URLs consistent. Google's SEO Starter Guide explains the broader work involved.
Website encryption is separate from email encryption
Mail apps also need secure connections and a hostname that matches their certificate. Use the secure connection settings shown for your mailbox. Website HTTPS does not configure SPF, DKIM or DMARC, and it does not guarantee that messages reach the inbox.
See the current hosting offer for included certificate features, or contact support with the affected hostname and exact error. Never send your account password in an ordinary message.
Reviewed 3 October 2026. Technical reference: cPanel SSL/TLS Status.