SSL certificates explained: what they do and what they do not
What SSL actually protects, why every page needs it, and how to fix the mixed content and redirect problems that break the padlock.
On this page
An SSL certificate encrypts the connection between a visitor's browser and your server, so nothing sent between them can be read in transit. It is required on every page, not just the checkout, and browsers now warn visitors when it is missing.
What SSL protects
SSL protects data in transit: form submissions, logins, card details and everything else a visitor sends you. Without it, anyone sharing a network with your visitor can read that traffic.
It also protects integrity. On an unencrypted connection, an intermediary can modify what the visitor sees, which is how injected advertising and malicious scripts get into otherwise clean pages.
What SSL does not protect
SSL says nothing about the security of your server, your software versions, your passwords or your backups. A completely compromised website can still show a padlock, because the padlock only describes the connection. Treat SSL as a floor, not a ceiling.
Common problems and how to fix them
| Symptom | Cause | Fix |
|---|---|---|
| Padlock missing on some pages | Mixed content: assets loaded over HTTP | Update image, script and stylesheet URLs to HTTPS |
| Site reachable on both HTTP and HTTPS | No redirect rule | Force a 301 from HTTP to HTTPS site-wide |
| Certificate expired warning | Auto-renewal not configured | Enable automatic renewal in your control panel |
| Warning only on www or only without | Certificate does not cover both hostnames | Reissue covering both, and pick one canonical version |
Do you have to pay for it?
No. An SSL certificate is included with every one of our hosting plans, from the BD 3.5 shared plan upwards. Any host charging separately for basic encryption in 2026 is charging for something the rest of the industry treats as standard.
Frequently asked questions
Yes, HTTPS is a confirmed ranking signal, and more importantly browsers warn visitors away from pages without it.
No. Modern HTTPS with HTTP/2 is typically faster than plain HTTP because of how connections are multiplexed.
Related guides
Security & SSL
Website security checklist for small businesses
Twelve practical security measures, from SSL and backups to updates and access control, that prevent the incidents that actually happen.
2026-07-25 · 8 min read
Web hosting
How much does web hosting cost in Bahrain?
Real hosting prices in Bahrain: shared from BD 3.5, private shared BD 8.5 and VPS BD 11.5 a month, plus what drives the difference and what you should never pay extra for.
2026-07-25 · 9 min read
Web hosting
Shared hosting vs VPS: which one does your business need?
A practical comparison of shared, private shared and VPS hosting, with the traffic levels and workloads that justify each step up.
2026-07-25 · 7 min read
Put this to work on your site
Send us the brief and we will tell you what it takes, what it costs and how long it will run.