SSL certificates encrypt data between a browser and web server, protecting sensitive info (e.g., billing details). A lock icon in the browser indicates SSL is active.
Coverage rules:* Certificates for
www.example.com also cover example.com (root domain).
* Other subdomains are not included unless specified in the CSR.
* Domains cannot be changed after issuance.
What SSL does:* Encrypts data in transit
* Verifies domain/organization identity
CSR (Certificate Signing Request):* Contains domain, organization info, location, and public key
* Must be generated on the hosting server before issuance
Certificate types:* SAN (Multi-domain): Covers multiple domains/subdomains (expandable)
* Wildcard: Covers unlimited subdomains for one domain
Validation levels:* DV: 1–2 days, email verification
* OV: 1–3 days, business verification + phone check
* EV: 1–10 days, full organization + requester verification
Upgrading:* Certificates cannot be upgraded after purchase
* Buy a new one if needed; install alongside the old or wait until expiry