ssl7 min readUpdated 2025-12-27
SSL Certificates in Plain English
The lock icon means your connection is encrypted, not that the site is trustworthy. Here is what SSL/TLS certificates actually prove and how to configure them.
DV vs OV vs EV
Domain-validated certificates prove control of a domain. Organization-validated adds a legal entity name. EV was designed to make browsers show a green bar and every browser has removed that UI — do not pay for it.
Chain of trust
Serve the full intermediate chain. Missing intermediates fail on Android and older Java clients even if desktop browsers work.
Frequently asked questions
- For internal services, fine. For public production, prefer per-name certificates issued via ACME — it's automatic and reduces blast radius.
Try it on your site
Run a free Website Auditor scan and see which of these controls you're missing.
Run a scan