Skip to main content

Security essentials

SSL Explained

People still say SSL, but modern secure websites use TLS. A valid certificate helps create an encrypted connection to the intended hostname; it does not certify the whole website as safe.

Plain-English guidance · Last reviewed 24 July 2026

On this page

The business case

Why it matters

Without correctly configured HTTPS, people on the network path may be able to read or alter traffic. Browsers also warn visitors when forms or pages use an insecure connection.

Certificates expire, cover specific hostnames and depend on a trusted issuing chain. Redirects, mixed content and renewal monitoring all affect whether HTTPS works consistently.

Know the exposure

Common risks

01

Expired or mismatched certificates

A certificate outside its validity period or missing a hostname causes trust errors and can interrupt customer journeys.

02

Mixed content

An HTTPS page that loads scripts, images or other resources over HTTP weakens protection and may be blocked by the browser.

03

False confidence

The padlock does not prove the organisation is honest or protect against vulnerable code, stolen accounts and malicious scripts.

Investigate, do not ignore

Warning signs

  • The browser shows a certificate, privacy or insecure form warning
  • HTTP pages remain accessible without a direct redirect to HTTPS
  • Some subdomains work while others show hostname errors
  • Console or scanner results report mixed HTTP resources
  • Renewal depends on one person manually remembering an expiry date

Reduce likelihood and impact

Practical steps

  1. 01

    List every public hostname

    Include the root domain, www, customer portals, APIs and other names that require browser or client trust.

  2. 02

    Issue and install correctly

    Use a trusted certificate covering the intended hostnames and provide the necessary chain on each serving endpoint.

  3. 03

    Move the whole journey to HTTPS

    Redirect HTTP directly, update internal assets and integrations, and test forms, callbacks, cookies and canonical URLs.

  4. 04

    Automate and monitor renewal

    Use reliable automation where supported and alert a named owner before failure. Verify renewal on the live endpoint.

  5. 05

    Keep HTTPS in perspective

    Continue patching the application, protecting accounts and handling data safely; transport encryption is one layer.

Defined website support

How AHANIX can help

AHANIX can review public HTTPS behaviour and help configure ordinary website certificates, redirects and mixed-content corrections.

  • Check the public certificate route, hostname coverage and HTTP redirects
  • Resolve website-level mixed content and HTTPS URL configuration
  • Coordinate certificate installation or renewal with the current host or DNS provider

Clear limits

What this cannot guarantee

  • A valid certificate cannot guarantee that a website, business or third-party script is trustworthy or free from vulnerabilities.
  • The AHANIX SSL Checker is a limited public check, not a vulnerability scan, penetration test or certificate-authority guarantee.

Continue with existing resources

Relevant tools and guides

These links use existing AHANIX tools and guides for the next useful check or deeper explanation.

Common questions

SSL explained questions

What is the difference between SSL and TLS?

TLS is the modern protocol used to secure connections. The term SSL remains common in phrases such as SSL certificate, even though obsolete SSL protocol versions should not be used.

Does a free certificate provide weaker encryption?

Price alone does not determine connection encryption. Certificate products may differ in validation, support, warranty or management, while correct protocol and server configuration remain essential.

Does HTTPS stop a website being hacked?

No. HTTPS protects data in transit and authenticates the responding hostname. It does not patch vulnerable software, stop stolen logins or validate all site content.

A scoped next step

Check the public HTTPS route first

Run the limited checker for visible signals, then ask AHANIX for help if certificate, redirect or mixed-content work is needed.

Open the SSL Checker

Continue in the Security Centre