SSL Certificates Explained for Business Owners

What SSL Does

An SSL certificate lets your website and a visitor's browser talk in code. Anyone snooping on the connection sees scrambled data, not names or phone numbers.

You can tell it is working when your web address starts with https and the browser shows a padlock. The "s" stands for secure.

The newer name for this technology is TLS. Almost everyone still says SSL, so we will too. They mean the same thing for your purposes.

Why It Matters for a Local Business

Your site probably has a contact form or a quote request. People type their name, phone, email and sometimes their address. SSL keeps that data private on its way to you.

It also matters for trust. A site without SSL can look unsafe to visitors. If someone is about to hand you their car, their house key or their case, small signs of care count.

The Three Kinds of Certificates

Certificates differ by how much the issuer checks before handing one out.

Domain Validated (DV). The issuer checks that you control the domain. That is all. This is the most common kind.
Organization Validated (OV). The issuer also checks that your business is real.
Extended Validation (EV). The issuer does a deeper check of your business records.

All three lock the connection the same way. The difference is the paperwork behind them. For most local business sites, a DV certificate is enough.

Free Certificates Are Real

Let's Encrypt is a certificate authority run by a nonprofit called the Internet Security Research Group. It gives out certificates at no cost to anyone who owns a domain.

Its certificates are domain validated. Let's Encrypt says it has no plans to issue OV or EV certificates. Its default certificates last 90 days, and it recommends renewing every 60 days. Software handles that renewal for you.

Many hosts use Let's Encrypt behind the scenes. If your host offers free SSL, this is often where it comes from.

Certificates Are Getting Shorter

The CA/Browser Forum is the group of certificate issuers and browser makers that sets the rules for public certificates. In 2025, it approved a ballot called SC-081. That ballot shortens how long a certificate can last, in steps.

Under the updated rules, the longest a certificate can last is:

200 days, for certificates issued on or after March 15, 2026.
100 days, for certificates issued on or after March 15, 2027.
47 days, for certificates issued on or after March 15, 2029.

Before this change, the limit was 398 days. That is why many owners remember renewing SSL once a year.

What This Means for You

Renewing by hand once a year is over. By 2029, a certificate will need to be replaced about every month and a half. No busy owner should be doing that by hand.

The answer is automatic renewal. Your host or your certificate tool should request and install a new certificate before the old one runs out. Let's Encrypt was built to work this way from the start.

Ask your host one simple question: "Do my certificates renew on their own?" If the answer is anything other than yes, plan a change.

Common SSL Problems

Even with a certificate in place, a few things can go wrong:

Expired certificate. Visitors see a full page warning. This is the most common problem, and automation fixes it.
Mixed content. The page loads over https, but an image or script still loads over plain http. The padlock may disappear.
Name mismatch. The certificate covers yourshop.com but not www.yourshop.com, or the other way around. Make sure both are covered.
No redirect. People who type http should be sent to the https version on their own.

A Quick Check You Can Do Today

Open your website on your phone and your computer. Look for the padlock. Click it and find the certificate details. You should see who issued it and when it expires.

Then type your address with www and without it. Both should land on a secure page.

Last, type your address with plain http at the front. You should end up on the https version without doing anything. If you see a warning page at any point, write down what it says and send it to whoever runs your site.

Put the Date on Your Calendar

Even with automatic renewal, it helps to know when your certificate ends. Add a reminder a week before that date. On that day, check that a new certificate is in place. If renewal ever fails, you will catch it before your customers do.

Getting Help

If your certificate still needs a manual renewal, now is a good time to fix that. T3CHS includes SSL that renews on its own with our hosting plans.

Common Questions

Is a free SSL certificate as secure as a paid one?

The lock on the connection works the same way. Paid certificates can add business checks, but a free DV certificate protects the data just as well.

Why does my browser say my site is not secure?

Your certificate may be missing, expired or not cover that exact address. It can also mean part of the page still loads over plain http.

How often do I need to renew my SSL certificate?

It depends on the certificate, and the maximum is shrinking. Under CA/Browser Forum rules it drops to 200 days in 2026 and 47 days by 2029, so set up automatic renewal.

Do I need SSL if I do not sell anything online?

Yes. Contact and quote forms still send names, phone numbers and emails, and SSL keeps that private.

What is the difference between SSL and TLS?

TLS is the newer version of the same idea. Most people still call it SSL.

Sources

Let's Encrypt: Aboutletsencrypt.org
Let's Encrypt: FAQletsencrypt.org
CA/Browser Forum: Ballot SC-081v3cabforum.org
CA/Browser Forum: TLS Baseline Requirementsraw.githubusercontent.com

Last reviewed September 27, 2026.