SSL / HTTPS

An SSL/TLS certificate encrypts the connection between visitors and your website, shown by HTTPS and the padlock in the browser. It protects form data and passwords, is required for online payments, and browsers warn visitors about sites without it.

How we use SSL / HTTPS

• Installing free or commercial certificates and setting up automatic renewal.
• Redirecting all traffic to HTTPS and fixing mixed-content warnings.
• Adding HSTS and other security headers for stronger protection.
• Checking certificates on subdomains, APIs and email services.

When SSL / HTTPS is the right choice

Every website needs HTTPS, without exception. Free certificates such as Let’s Encrypt are sufficient for most sites; organisations with specific compliance needs may choose an organisation-validated certificate.

Related: Web hosting & domains, Cloudflare, Nginx. Talk to our team about your project.

Frequently asked questions

Is a free SSL certificate safe?

Yes. Free certificates such as Let’s Encrypt provide the same encryption strength as paid ones. Paid certificates mainly add organisation validation or warranties.

Why does my site show “not fully secure”?

Usually some images or scripts still load over HTTP. We find and fix these mixed-content links so the padlock shows on every page.

Do subdomains need their own certificate?

Each subdomain must be covered, either by its own certificate or by a wildcard certificate that covers all subdomains of your domain.