What is an SSL Certificate?

What an SSL certificate actually does — TLS in plain words

Strictly, SSL certificates today are TLS certificates — SSL was the original protocol name and survives as vocabulary. The certificate lets a browser verify your server's identity and establish encrypted traffic.

• When a visitor connects, the server presents the certificate; the browser checks it against trusted Certificate Authorities (CAs) and verifies it matches the domain.

• If satisfied, the TLS handshake agrees encryption keys, so passwords, forms and payments travel scrambled and tamper-proof.

• The padlock and https:// are the visible evidence.

• Without it, browsers label the site 'Not secure' — a trust wound no business site can afford, and a small ranking handicap in Google.

So yes: every site that takes an enquiry or a payment needs one.

The padlock, HTTPS and browser warnings

Install the certificate on the account that actually serves the site, force HTTPS, then view the page source for http:// images, stylesheets or scripts. The padlock stays broken until those are HTTPS too. Renewal should be automatic; if the padlock disappears, check that the certificate is still bound to this hostname.

Types — DV, OV, EV and wildcard

Types — DV, OV, EV and wildcard. Do the change this heading names on one site first, then check it in a private browser window or in the mail client, depending on the topic. Change one setting at a time, and undo it if the result is wrong before you try the next. If you want the Jaipur desk to look with you, email support@webji.services — that mailbox is staffed 24/7 in Hindi and English. Phone +91 141 4941811 is business hours only.

Free vs paid certificates — what you really need

Free versus paid, without mystique: encryption strength is identical — a Let's Encrypt certificate provides the same TLS as a ₹20,000 certificate, and the padlock looks the same. The differences are validation depth (free is DV only; OV and EV need paid), warranty coverage, validity periods, support and wildcard convenience.

Choose free DV for any normal website, blog, portfolio or store whose payments run on a gateway — the payment page's security is the gateway's, not your certificate's. Choose paid for organisation validation, wildcards at scale, or compliance policies naming warranty levels. WebJi® hosting includes free AutoSSL; paid PositiveSSL from ₹1,800 yearly covers the extras — our SSL price guide lists the tiers.

How SSL is issued — CSR, CA, AutoSSL in cPanel

1. CSR: your server generates a key pair — a private key that never leaves the server, and a public key wrapped in the Certificate Signing Request with your domain details.
2. Validation: the CA proves domain control via an HTTP file challenge, a DNS TXT record, or email to the domain's registered contacts.
3. Issue: the CA signs your certificate, chaining to a root your browser already trusts.
4. Installation: the certificate plus intermediate chain installs in cPanel (SSL/TLS), Plesk, or the web server config.
5. Renewal: in cPanel, AutoSSL automates the entire loop with Let's Encrypt/Sectigo and renews on schedule.

Paid commercial certificates follow the same mechanics with deeper vetting.

Mixed-content and not-secure errors

How this plays out with Let's Encrypt: settings that look cosmetic usually decide page speed and uptime under real traffic. The defaults WebJi® ships are tuned for Indian network conditions, and support can review your setup on request.

SSL, SEO and browser trust

Install the certificate on the account that actually serves the site, force HTTPS, then view the page source for http:// images, stylesheets or scripts. The padlock stays broken until those are HTTPS too. Renewal should be automatic; if the padlock disappears, check that the certificate is still bound to this hostname.