A TLS certificate, often sold as an SSL certificate, helps browsers establish an encrypted connection to a named service. Choose it by the hostnames you need to protect, the validation required and the renewal process you can maintain. The certificate does not prove that every page or business offer is trustworthy.
IN THIS ARTICLE
01 List the required names first
Write down the exact public names, such as example.com, www.example.com and shop.example.com. Include only names you control. Check any existing hosting-provided certificate before buying another product, and confirm whether a CDN terminates the public connection.
- Single-name or bundled coverage: inspect the product's actual names. Some certificates include an additional www or root name, but this should not be assumed.
- Wildcard coverage: a name such as
*.example.comcovers one subdomain level. It does not by itself coverexample.comora.b.example.com. - Multiple names: a suitable multi-domain product can include several approved names in its subject alternative name list, subject to its allowance.
02 Understand validation
Domain validation checks control of a name. Organisation and extended validation products involve additional checks defined by the certificate authority. They do not offer a magic stronger encryption mode simply because their validation takes longer, and modern browsers do not generally display the old prominent green company-name bar.
03 Prepare for issue and installation
- Confirm the correct product, names and supported server before ordering.
- Choose the supported certificate request or managed issuance method. Keep private keys private.
- Complete the authority's current validation instructions using the authorised domain or organisation contacts.
- Install the issued certificate and required chain at the service presenting HTTPS, then test each covered name.
- Set up renewal ownership and expiry monitoring from the first installation.
Common question: is a long subscription one long certificate?
No. The purchased service period can include multiple certificate issuances. Public TLS validity limits are shorter than many billing terms, so check the actual installed certificate's expiry and the product's replacement process.