SSL (more precisely TLS) encrypts the connection between your visitors and your website. When it is active, your address starts with https:// and browsers show a padlock.
Why you need HTTPS
- Security: protects logins, forms and payments.
- Trust: browsers warn visitors about sites that are not secure.
- SEO: HTTPS is a confirmed Google ranking signal.
How to get a free SSL certificate
Many cPanel hosts offer free automatic certificates. Free certificates from non-profit authorities are widely trusted and renew automatically. Check your plan or ask support to confirm your account has automatic SSL.
- Make sure your domain points to your hosting. See this guide.
- Open the SSL/TLS or SSL Status section in cPanel.
- Run the automatic certificate check for your domain.
- Wait a few minutes for it to be issued.
Force HTTPS
After the certificate is active, redirect all HTTP traffic to HTTPS. In WordPress, set both the WordPress Address and Site Address to https:// under Settings.
Fix "not secure" and mixed content
- Update old image and script links from http:// to https://.
- Use a search-and-replace tool or plugin for old URLs in the database.
- Clear your cache after changes.
What SSL actually does
An SSL/TLS certificate has two jobs. First, it encrypts data between the browser and your server, so passwords and payment details cannot be read on the way. Second, it verifies identity, proving that the server really belongs to the domain. Without it, browsers show a "Not secure" warning, which damages trust even on a simple brochure site.
Types of certificates
- Domain Validated (DV): proves you control the domain. Fast and often free. Enough for most sites.
- Organisation Validated (OV): also checks the business identity.
- Extended Validation (EV): the strictest check, mainly used by large organisations.
- Wildcard: covers all subdomains of a domain.
Common SSL errors and fixes
| Error | Usual cause | Fix |
|---|---|---|
| Certificate not trusted | Self-signed or incomplete chain | Reissue a valid certificate |
| Name mismatch | Certificate for a different domain or missing www | Include both example.com and www |
| Certificate expired | Auto-renewal failed | Check DNS and renew |
| Too many redirects | Conflicting HTTPS redirect rules | Use only one redirect method |
| Mixed content | Images or scripts still use http | Update the links to https |
SSL and SEO
Google has used HTTPS as a ranking signal for years. More importantly, secure sites convert better because visitors trust them. After moving to HTTPS, update your sitemap and Search Console property to the https version, and make sure old http URLs redirect permanently.
Renewal and monitoring
Free certificates are short-lived and renew automatically. That works well as long as your DNS remains correct. If you change servers or nameservers, recheck SSL immediately. See migrating a site.
FAQ
Is a free SSL as good as a paid one?
For most websites, yes. Paid certificates add features like extended validation and warranties.
Does SSL slow down my site?
No. Modern HTTPS has negligible impact.
Ready to launch? Compare SyllHost hosting plans, or search for your domain on our domain search page. Questions? Talk to our team.