What is an SSL Certificate and why do I need one?

SSL stands for Secure Sockets Layer. It is a standard security technology for establishing an encrypted link between a website server and a browser.

There are small data files stored on your web server, that encrypt and protect any sensitive information that your users may send you through your website. This includes details entered through the forms on your site, credit card or login details and personal information.

Why does my site need an SSL Certificate?

All websites should have an SSL certificate because they provide an extra layer of protection for your visitors. Your visitors will see that you have taken precautions to protect them and this builds trust.

Another bonus is that most popular search engines like Bing or Google, prefer to send their searchers to sites that have SSL certificates. By installing one you are increasing your chances of appearing in relevant searches.

How do I know if my site has an SSL certificate?

When you visit a website, you may notice that there is a padlock in the address bar. This means the site you are visiting has an SSL certificate. The website address of a secure site will start with https.
If there is a message in the address bar that says, “Not Secure”, this means the site does not have an SSL certificate installed. Website addresses without an SSL certificate will start with http.

Are there different types of SSL certificates?

There are three main types of SSL certificate:

Domain Validation (DV) – this SSL certificate verifies that the site is authentic, and the owner has the right to use the domain. For most sites, this type of SSL certificate is perfectly fine.

Organisation Validation (OV) – this SSL certificate verifies the company name, location, and domain name. Sites that process credit cards directly from their web server or extremely sensitive information will need this type of SSL certificate. Note that if you use third parties to process credit card payments, like PayPal, Stripe or Worldpay, a DV level certificate should be sufficient.

Extended Validation (EV) – this SSL certificate is the highest type of certificate that you can get. There are many checks in place to prove that you are who you say you are. It is unlikely that your organisation will need this type of SSL certificate, they are usually used by high profile institutions that may be prone to phishing attacks or scams, such as big brands, banks, or governments.

Where can I get an SSL certificate?

SSL certificates are issued by Certificate Authorities (CAs), organisations that are trusted to verify the identity and legitimacy of any entity requesting a certificate.

Your web browser will check that the site you are visiting has an SSL certificate issued by a trusted CA.

You should be able to get your SSL certificate from your domain name registrar or your website hosting provider.

For a list of CAs and more information see:
https://en.wikipedia.org/wiki/Certificate_authority

How much are DV SSL certificates?

DV level SSL certificates are free, although your hosting provider or web developer may charge you a fee to install them. Generally speaking, given the importance and relative ease of getting your SSL certificate, this should be a priority task for your organisation.

What’s next?

Now you know what SSL certificates are and the important role they play in protecting your website visitors, you’ll be able to ask your hosting company or web developer to help you get one for your website.

The Digital Culture Network is here to support you and your organisation. Our Tech Champions can provide free 1-2-1 support to all arts and cultural organisations who are in receipt of, or eligible for, Arts Council England funding. If you need help or would like to chat with us about any of the advice we have covered above, please get in touch. Sign up for our newsletter below and follow us on Twitter @ace_dcn for the latest updates.

Useful links and further reading

A comprehensive guide to SSL certificates by Search Engine Land

More information on SSL certificates from Wikipedia

Article by Neil Patel on how SSL certificates affect search engine rankings

Original article by Roberta Beattie.