Turkey (Türkçe)
Worldwide (English)
An SSL certificate is a digital document that encrypts the connection between a website and a visitor's browser and verifies the site's identity. Sites with SSL open with https://, and the browser's address bar shows that the connection is secure. The protocol used today is actually called TLS, but the term "SSL certificate" has stuck.
In this article we explain what an SSL certificate does, its types, the difference between free and paid certificates and how to install one on your site.
What Does an SSL Certificate Do?
- Encryption: data entered in forms, such as passwords, card details and contact information, can't be read on the networks in between.
- Authentication: visitors can be sure they are connected to the right site.
- Data integrity: the content being transferred can't be altered on the way.
- Trust: browsers mark non-HTTPS pages as "Not secure", a warning that drives visitors away.
- SEO: Google uses HTTPS as one of its ranking signals.
How Does SSL Work?
- When the browser wants to connect to an HTTPS address, the server sends its certificate.
- The browser checks that the certificate was issued by a trusted certificate authority (CA), hasn't expired and matches the domain.
- If the checks pass, both sides agree on encryption keys used only for that session.
- From then on, all data exchanged is encrypted.
Types of SSL Certificates
By validation level
| Type | What it validates | Who it suits |
|---|---|---|
| DV (Domain Validation) | That you control the domain | Blogs, company sites, most websites |
| OV (Organization Validation) | Domain + that the company exists | Corporate companies |
| EV (Extended Validation) | Thorough company verification | Banks, large e-commerce sites |
The encryption strength is the same for all three; the difference is how thoroughly the certificate owner's identity is verified.
By coverage
- Single domain: protects one address (e.g. example.com and www.example.com).
- Wildcard: protects a domain and all its subdomains (*.example.com).
- Multi-domain (SAN): combines different domains in one certificate.
Free SSL or Paid SSL?
Free certificates issued by authorities such as Let's Encrypt are DV certificates and are no different from paid DV certificates in terms of encryption. They are issued for short periods, but control panels renew them automatically.
Paid certificates are chosen when you need OV/EV validation, a warranty included with some products or dedicated support. For personal sites, blogs and most company sites, free SSL is enough.
How to Get and Install an SSL Certificate
Automatic SSL on hosting
On most cPanel hosting plans, free SSL is set up automatically. Once your domain's DNS records point to the hosting server, the certificate is created shortly afterwards.
Installing a paid certificate
- Create a CSR (certificate signing request) and a private key on the server or in the control panel.
- Send the CSR to the certificate provider and complete validation (by email, DNS or file).
- Upload the issued certificate and the intermediate certificates (CA bundle) to the server.
After installation
- Redirect HTTP addresses to HTTPS with a 301 redirect.
- Make sure image and script links on your pages also use HTTPS (mixed content warnings).
- If you use WordPress, update the site address to https:// in the settings.
Common SSL Errors
- Certificate expired: check whether automatic renewal is working.
- Domain mismatch: the certificate may not cover the www or non-www address.
- Missing intermediate certificate: causes "untrusted certificate" errors on some browsers and devices.
- Mixed content: loading HTTP resources on an HTTPS page breaks the padlock.
SSL on ViHyper Hosting
An SSL certificate is set up free of charge on all ViHyper web hosting, WordPress hosting and reseller hosting plans. Once you connect your domain to the plan, your site can open over HTTPS without any extra steps. If you don't have a domain yet, you can start on the domain search page.
Frequently Asked Questions
How long is an SSL certificate valid?
Free certificates are usually valid for 90 days and renew automatically. Paid certificates are issued for at most one year, and the industry is moving towards even shorter certificate lifetimes over time.
Does an SSL certificate slow down a site?
Not noticeably on modern servers and browsers. Fast protocols such as HTTP/2 and HTTP/3 already run over HTTPS.
Is a site with an SSL certificate always trustworthy?
No. SSL only shows that the connection is encrypted; scam sites can use free SSL too. Always check the domain in the address bar.
Do I need a separate certificate for my subdomains?
You can get a separate certificate for each subdomain or use a wildcard certificate that covers them all. cPanel's automatic SSL can also cover configured subdomains.
