Back to guides
After launch2 min read
Secure connection and the certificate
What the padlock in the browser means, why you don't need to buy one, and what to do about “connection not secure” warnings.
The padlock in the address bar means the connection between visitor and website is encrypted. Nobody in between can see what's being sent — the details from your contact form, for instance.
How we handle it
- The certificate is issued automatically as soon as the domain is connected.
- Nothing is purchased and there's no extra charge for it.
- It renews itself — no expiry dates to watch, nothing to put in your calendar.
- Unsecured
http://always redirects tohttps://.
When the browser reports a problem
Shortly after launch you might see a warning that the connection isn't secure. The usual causes:
- The certificate is still being issued — normally a few minutes after the domain is set up correctly. Try again shortly.
- The date on your computer is wrong — if the device clock is off, certificates appear invalid.
- A special security record on the domain (CAA) is blocking issuance. We can check this and tell you what to adjust.
If the warning persists more than an hour after the domain is set up, contact us. This isn't something that “sorts itself out in time”.