An SSL certificate does two things. It encrypts what a visitor sends you, so nobody in between can read it, and it proves your site is really your site.
That is it. Everything else is detail.
Why it matters even without a shop
The obvious case is payment details and passwords. Without encryption, anything typed into a form travels across the internet in plain text, readable by anyone on the same network.
But the second job matters just as much, and it applies to every site. The certificate proves the domain belongs to you, which is what stops someone building a convincing copy of your site and collecting your customers' details on it.
There is also a practical reason. Browsers mark sites without a certificate as "Not secure" in the address bar, and Google has treated it as a ranking signal for years. A site without one looks broken to a visitor before they have read anything.
About the name
Strictly, SSL was replaced by TLS a long time ago, and the SSL versions are considered insecure. Every certificate you buy today is really a TLS certificate.
Everyone still calls them SSL certificates, including the companies selling them. So when a hosting provider offers you SSL, you are getting TLS. The name stuck, the technology moved on.
How to check
Look at the address bar. A padlock and an address starting https means the certificate is valid and the connection is encrypted. Click the padlock to see who issued it and when it expires.
The most common failure we see is not a missing certificate. It is an expired one, which turns a working site into a full-page browser warning overnight.
At Selva Digital a certificate is part of every hosting package, renewed automatically, so it is not something you have to remember. If you are not sure what your site has, send us the address and we will tell you.
Builds websites and the systems behind them for small businesses in Spain and the Netherlands. Writes down the things clients ask twice.
