Website AuditorWebsite Auditor
ssl7 min readUpdated 2025-12-27

SSL Certificates in Plain English

The lock icon means your connection is encrypted, not that the site is trustworthy. Here is what SSL/TLS certificates actually prove and how to configure them.

DV vs OV vs EV

Domain-validated certificates prove control of a domain. Organization-validated adds a legal entity name. EV was designed to make browsers show a green bar and every browser has removed that UI — do not pay for it.

Chain of trust

Serve the full intermediate chain. Missing intermediates fail on Android and older Java clients even if desktop browsers work.

Frequently asked questions

For internal services, fine. For public production, prefer per-name certificates issued via ACME — it's automatic and reduces blast radius.

Try it on your site

Run a free Website Auditor scan and see which of these controls you're missing.

Run a scan

Related tools

Tool

SSL Certificate Checker

Verify the SSL certificate for any domain in seconds.

Read

Tool

TLS Checker

Confirm modern TLS support for any hostname.

Read

More guides

Guide

TLS: Ciphers, Versions and Common Mistakes

The TLS versions and cipher suites you should support in 2026, plus what to deprecate.

Read

Guide

HTTPS: The Non-Negotiable Baseline

Every site needs HTTPS. Here's how to enforce it, why HTTP is worse than you think, and how to test your setup.

Read