What is an SSL certificate?

In plain English

An SSL certificate is a digital credential used when a browser sets up a secure connection to a website. Think of it like checking the name on a sealed envelope before sending a message: the certificate helps the browser establish that it is talking to the site named in the address, while encryption helps keep the message private on its journey. The web address then starts with https:// rather than plain http://.

The name can be confusing. SSL is an older protocol; modern secure web connections use TLS. People and hosting companies still say “SSL certificate” because the phrase is familiar. Mozilla’s TLS guide explains that TLS supports encryption, integrity and authentication. Those properties help prevent someone on the network path from reading or secretly changing information exchanged between the browser and website.

The certificate is one layer of security, not a seal of approval for the whole business. A scam site can use HTTPS. An expired certificate can warn visitors even when the underlying business is genuine. Secure hosting, maintained software, sensible passwords and careful handling of customer data remain separate jobs.

Why it matters to a Jersey business

Even a small brochure site may have an enquiry form asking for a customer’s name, phone number or email address. That information should travel over HTTPS. A visitor may also browse a service page before making a sensitive enquiry. Let’s Encrypt explains why encrypted connections matter even for sites whose owners think they collect little private information.

For a Jersey business, the practical test is simple: open the public site on a phone, check that the address begins with https://, then submit a test enquiry. The certificate should cover the exact web names customers use, such as both example.je and www.example.je if both are advertised. If one version produces a browser warning, ask the host to fix it before sending customers there.

The certificate should also renew without a scramble. Some hosts include automatic management; others expect the owner or developer to handle it. A free certificate can be perfectly suitable, but its renewal still needs a responsible party. Our Jersey website security guide covers the wider set of security tasks.

A Jersey example

Imagine a fictional St Martin physiotherapy practice with a contact form for appointment requests. The patient opens example.je and enters a name and telephone number. With HTTPS configured properly, the browser and website communicate through an encrypted connection. The certificate does not decide how long the practice keeps the form submission or who can read it after arrival. Those are separate data handling decisions.

If the practice changes its domain, the new name needs a valid certificate before the site sends people to it. If an old http:// link remains on a printed leaflet, the site should redirect that visit to the secure address. Test the full route, not only the homepage.

What to do

Ask the hosting provider who issues, installs and renews the certificate. Confirm that all public domain variations are covered and that http:// pages redirect to https://. Look for mixed content, such as a page loaded securely but an image or script requested over an insecure address. A browser’s developer tools or a technical helper can identify it.

Set a reminder to check the public site after a domain move or hosting change. If visitors see a certificate warning, do not advise them to click past it. Check the domain and certificate configuration with the provider. Let’s Encrypt’s explanation shows that certificates can be issued and renewed automatically when the server proves control of the domain.

Common myths

“The padlock proves the company is honest.” It tells you about the connection and site certificate, not whether the seller will fulfil an order.

“A contact form on a small site does not need HTTPS.” Names and contact details are still worth protecting in transit.

“Paying more for a certificate automatically makes the whole site secure.” The host, software and data handling also matter. The certificate solves a specific connection problem.

Our take

Jersey Web’s view is that HTTPS should be a routine part of publishing any business site. The useful question for an owner is who keeps it working after launch. A certificate that renews reliably and covers the addresses customers actually use is the practical goal.