What SSL protects
TLS encrypts traffic between a browser and server and enables HTTPS. It does not remove malware or fix application vulnerabilities.
Choose by coverage
A single-domain certificate covers one name, a multi-domain certificate covers several, and a wildcard covers first-level subdomains.
Operate it well
Use automatic renewal, redirect every variant to HTTPS, remove mixed content and monitor expiration.
