An SSL certificate is the common name for a digital certificate that enables HTTPS. Modern HTTPS uses Transport Layer Security, or TLS, even though SSL remains common terminology.

HTTPS encrypts information exchanged between a visitor and a website and lets the browser verify the hostname associated with the certificate.

What Happens During HTTPS?

  1. The browser requests a secure connection.
  2. The server presents its certificate.
  3. The browser checks hostname, validity, and trust.
  4. Encryption settings and session keys are negotiated.
  5. Data is exchanged through the encrypted connection.

Common Certificate Problems

  • Expired certificate
  • Hostname mismatch
  • Incomplete certificate chain
  • Mixed HTTP and HTTPS content

HTTPS protects the connection, but it does not prove that a site is trustworthy or malware-free. Website security also requires application updates, strong authentication, safe permissions, and backups.