TL;DR SSL Certificate
An SSL certificate is a digital certificate that authenticates a website's identity and enables an encrypted connection between a web server and a visitor's browser. When a site has a valid SSL certificate, connections to it use HTTPS rather than HTTP, and visitors see a padlock icon in their browser address bar. The encryption is actually handled by TLS, the modern protocol that replaced SSL, though the term SSL certificate has stuck as the common name for these certificates regardless. Without an SSL certificate, any data transmitted between a visitor and your server, including passwords, form submissions, and payment details, travels in plain text and can be intercepted. Google also uses HTTPS as a ranking signal, meaning sites without SSL certificates are disadvantaged in search results. CloudSonic provisions and renews SSL certificates automatically for every hosted site so you never need to think about expiry dates or manual renewals.
How an SSL Certificate Works
An SSL certificate enables encrypted HTTPS connections through a process called the TLS handshake. When a browser connects to your site over HTTPS, the server presents its SSL certificate. The browser verifies that the certificate was issued by a trusted Certificate Authority, that it matches the domain being requested, and that it has not expired. If all checks pass, the browser and server use the certificate to negotiate a shared encryption key through a process that cannot be intercepted even if the communication is observed. All subsequent data transferred in that session is encrypted using that shared key. The certificate itself contains the domain name it is valid for, the Certificate Authority that issued it, its expiry date, and the server's public key. Certificates issued by Let's Encrypt, which CloudSonic uses, are trusted by all major browsers and expire every 90 days, which is why automatic renewal is essential.
# Check when your SSL certificate expires
echo | openssl s_client -connect cloudsonic.com.au:443 -servername cloudsonic.com.au 2>/dev/null | openssl x509 -noout -dates
# Output:
# notBefore=Aug 1 00:00:00 2026 GMT
# notAfter=Oct 30 00:00:00 2026 GMT
# Check which Certificate Authority issued your certificate
echo | openssl s_client -connect cloudsonic.com.au:443 -servername cloudsonic.com.au 2>/dev/null | openssl x509 -noout -issuer
# Renew a Let's Encrypt certificate manually
sudo certbot renew --nginx
Why an SSL Certificate Matters for Your Website
An SSL certificate matters for three distinct reasons that together make it non-negotiable for any website. The first is security. Without HTTPS, all data transmitted between your visitors and your server is unencrypted and can be read or modified by anyone on the network path between them. This includes login credentials, form submissions, payment details, and session cookies. The second is trust. Browsers display a padlock icon for HTTPS sites and a warning for HTTP sites. Visitors who see a security warning are unlikely to proceed, particularly on pages that ask for personal information. The third is SEO. Google has used HTTPS as a ranking signal since 2014 and the weighting has increased over time. An HTTP site is at a disadvantage in search results compared to an equivalent HTTPS site. All three reasons apply regardless of what your site does or whether you think you handle sensitive data. Every website needs TLS encryption and a valid SSL certificate.
