What SSL protects
TLS encrypts traffic between a browser and server and enables HTTPS. It does not remove malware or fix application vulnerabilities.
A process tochoose and run a certificate
| Step | Action | Tip |
|---|---|---|
| 1 | ActionInventory hostnames | TipInclude the root, www and every public subdomain |
| 2 | ActionChoose coverage | TipSingle-name, multi-domain or wildcard based on the inventory |
| 3 | ActionInstall certificate and chain | TipConfirm browsers trust all intermediates |
| 4 | ActionEnforce HTTPS | TipRedirect variants and remove mixed content |
| 5 | ActionAutomate renewal | TipAdd alerts and retest after server or DNS changes |
Choose by coverage
A single-domain certificate covers one name, a multi-domain certificate covers several, and a wildcard covers first-level subdomains.
Operate it well
Use automatic renewal, redirect every variant to HTTPS, remove mixed content and monitor expiration.
Verified sources
Go deeper
These two resources expand on the key points with criteria, data and guidance from the organizations responsible for them.
MDN guide to TLS
It explains how TLS adds encryption, integrity and authentication to HTTPS and why page resources must also load securely.
Let’s Encrypt technical FAQ
It clarifies domain validation, multi-domain and wildcard certificates, lifetimes and the importance of automated renewal.
