Which certificate to choose
Most sites can use a domain-validated DV certificate, including free options. Wildcard certificates cover one subdomain level; SAN certificates can include multiple names. Choose based on your domain structure.
Installation goes beyond issuance
Install the full certificate chain, configure HTTPS and HTTP redirects, and remove mixed content. Check forms, external resources and URLs in canonical tags and sitemap.xml.
Renewal and monitoring
Set up automatic renewal and an independent expiry alert. Verify that the server actually uses the renewed certificate. Enable HSTS for all subdomains only after checking their HTTPS readiness.
If the browser shows a warning
Possible causes include expiry, a name mismatch, an incomplete chain or HTTP resources. Fix the cause instead of asking visitors to bypass the warning.