SSL certificates: types, validation, and setup
Understand what SSL/TLS certificates do, the difference between DV, OV, and EV certificates, free vs paid options, and how HTTPS protects your visitors.
UnderHost NOC
Network Operations
SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) encrypt the connection between a visitor's browser and your web server. When a site has a valid SSL certificate, the browser shows a padlock icon and loads pages over HTTPS. Without it, browsers show a "Not Secure" warning.
Certificate types
| Type | Validates | Issuance time | Best for |
|---|---|---|---|
| DV (Domain Validation) | Domain ownership only | Minutes | Blogs, small sites, personal projects |
| OV (Organization Validation) | Domain + organization identity | 1–3 days | Business websites, ecommerce |
| EV (Extended Validation) | Domain + thorough org vetting | 1–5 days | Banks, large ecommerce, high-trust sites |
| Wildcard | Domain + all subdomains (*.domain.com) | Minutes–days | Sites with many subdomains |
| Multi-domain (SAN) | Multiple domain names | Minutes–days | Hosting multiple domains under one cert |
Free vs paid certificates
| Free (Let's Encrypt) | Paid (commercial CA) | |
|---|---|---|
| Cost | Free | $10–300+/year |
| Validation level | DV only | DV, OV, or EV |
| Validity period | 90 days (auto-renewed) | 1 year |
| Wildcard support | Yes | Yes |
| Browser trust | Trusted by all modern browsers | Trusted by all browsers |
| Best for | 99% of websites | Businesses needing OV/EV validation display |
For most websites, a free Let's Encrypt DV certificate is perfectly sufficient. UnderHost automatically provisions and renews Let's Encrypt certificates on shared hosting via AutoSSL.
How HTTPS works
- Browser connects to your server and requests a secure session
- Server sends its SSL certificate (contains the public key and identity info)
- Browser verifies the certificate was signed by a trusted Certificate Authority (CA)
- Browser and server negotiate an encryption key
- All data is encrypted in transit-cannot be read by third parties
The certificate itself does not encrypt files on your server-it only encrypts data in transit between the visitor and server. Your server-side data security is separate.
Get an SSL certificate
Use free AutoSSL with UnderHost hosting or install your own SSL certificate in cPanel.
