SSL certificate and HTTPS: why every company site needs it

Perhaps you have seen it before: you open a website, and the browser warns in red letters «Not secure» or blocks the page entirely. In that same moment the trust is gone, no matter how beautiful the page behind it looks. The culprit is almost always a missing SSL certificate.

It sounds technical, but at its core it is a very simple matter. Here I explain what an SSL certificate is, why HTTPS is mandatory today and what it concretely means for your business, without jargon.

What is an SSL certificate anyway?

When someone visits your website, data travels back and forth between their device and your server. Without protection, this data travels openly across the net, and anyone listening in along the way can read it. With a contact form, that would be your customer's name, phone number or message.

An SSL certificate encrypts this connection. Plain text becomes an unreadable code that only your server and the visitor's browser can decrypt again. You can recognise it by the small lock in the address bar and by the abbreviation https:// instead of just http. The «s» stands for «secure».

Why HTTPS is mandatory today

In the past, encryption was something for online shops and banks. Today it applies to every site, including the simple calling-card website of a tradesperson. The reasons are solid:

• Browsers actively warn: Chrome, Safari and Firefox mark sites without SSL as «Not secure». Your visitors see this warning before they have read a single word.
• Data protection is law: As soon as you offer a contact form or a newsletter, you process personal data. The revised Swiss Data Protection Act expects this to be transmitted securely.
• Often nothing works without it: Some functions and payment services refuse service entirely if there is no encrypted connection.

Trust is decided in seconds

Most visitors do not know the technical background, but they all have the gut feeling. A lock symbol signals: everything is fine here, I can leave my data here. A warning, by contrast, triggers exactly the opposite, often subconsciously.

Especially for an SME that wants to convince online, this is decisive. You may have only a single moment to come across as reputable. A «Not secure» message squanders this moment before your offering has even had a chance.

The SEO advantage: Google rewards secure sites

HTTPS is not only a question of trust, but also a ranking factor. Google has confirmed for years that secure sites are preferred. Between two otherwise equivalent websites, the encrypted one has the edge.

The effect is usually no landslide, but it adds up, together with the many other signals Google pays attention to. And conversely: a page that visitors leave immediately because of a warning sends bad signals. Security and good ranking therefore go hand in hand. Anyone who wants to know more about visibility will find plenty on it in my other articles.

What does an SSL certificate cost?

Here comes the good news: in the vast majority of cases nothing extra. Through providers like Let's Encrypt there are free, fully-fledged certificates that are renewed automatically. With a cleanly built site, HTTPS is standard today and already included in the hosting.

There are also paid certificates with an additional check of the company, but the typical SME website does not need those. For a company presence or a small online shop, the free certificate is technically fully sufficient. The only important thing is that it is set up correctly and renewed automatically, so that it never expires unintentionally.

What you should pay attention to

Installing an SSL certificate is one thing, doing it properly is another. Three points are decisive in practice:

• Redirect everything: Every call to the old http address should automatically lead to the secure https version. Otherwise the page exists twice, which confuses Google.
• Automatic renewal: Free certificates expire after 90 days. This has to happen automatically in the background, not by hand.
• No mixed content: If a secure page still loads individual images or scripts unencrypted, the browser complains anyway. A checking eye is worth it here.

That sounds like fiddly work, and it is, but it is standard and simply part of every site I build. You should not even have to worry about it.

In short

An SSL certificate is no longer an optional extra, but the foundation of every reputable company site. It protects your customers' data, builds trust at first glance and helps you on Google. The best part: done right, neither you nor your visitors notice any of it, it simply works.

If you are unsure whether your current site is cleanly encrypted, I am happy to take a quick look. A new, hand-built site brings HTTPS with it from the start anyway, just get in touch via the contact form, and we will sort it out without fuss.