Home › Knowledgebase › KB-1292

Why does my website need an ssl certificate and https?

Web Hosting & Website Management KB-1292

Summary

This guide helps you troubleshoot and resolve: Why does my website need an ssl certificate and https?. Follow the steps below to fix the issue.

Quick Tip: Need immediate assistance? đź’» Open a Ticket

Common Causes

HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP, the protocol used to transfer data between a web browser and a website. When a website uses HTTPS, the connection is encrypted using an SSL/TLS certificate. This encryption ensures that any information sent by a visitor—such as contact form submissions, login credentials, or payment details—cannot be read or intercepted by third parties.

Why SSL Certificates and HTTPS Matter

SSL certificates do more than just encrypt data. They also authenticate the identity of your website, assuring visitors that they are connecting to your legitimate organisation and not an impostor site. Modern web browsers display a padlock icon in the address bar when a site is secured, providing a visual cue that builds customer confidence.

Search engines such as Google use HTTPS as a ranking signal. Websites served over HTTPS are generally favoured in search results over unsecured HTTP sites, meaning a missing or expired certificate can directly impact your visibility to potential customers. Additionally, browsers now mark HTTP sites as “Not Secure,” which can deter visitors from completing forms or making purchases.

Quick Fix Steps

  1. Visit your website using https:// at the start of the URL.
  2. Look for the padlock icon in the browser address bar.
  3. Click the padlock to view certificate details and check the expiry date.
  4. If the certificate is expired or missing, contact your hosting provider or certificate authority to renew or install a new one.
  5. Set up a permanent redirect from http:// to https:// so all traffic uses the secure connection.

Detailed Instructions

Installing or Renewing an SSL Certificate

  1. Log in to your hosting control panel or domain registrar account.
  2. Navigate to the security or SSL/TLS section (often labelled SSL Certificates, Security, or TLS/SSL Manager).
  3. Select the option to Generate, Install, or Renew a certificate.
  4. If required, generate a Certificate Signing Request (CSR) through your control panel and submit it to your certificate authority.
  5. Once the certificate is issued, install it on your server via the control panel or upload the certificate files provided by the authority.
  6. Enable the option to Force HTTPS or Redirect HTTP to HTTPS if available.
  7. Test your website by visiting https://yourdomain.com.au and confirming the padlock appears.

Setting Up an HTTPS Redirect

  1. Access your website’s root directory via FTP, File Manager, or SSH.
  2. Locate or create the .htaccess file (for Apache servers) or the web.config file (for IIS servers).
  3. Add a rewrite rule that redirects all http:// traffic to https://.
  4. Save the file and clear your browser cache.
  5. Visit your site using http:// and confirm it automatically loads over https://.
Incorrectly editing server configuration files can take your website offline. If you are unsure, ask your hosting provider to apply the redirect for you.

Troubleshooting

Mixed-Content Errors

A mixed-content error occurs when an HTTPS page loads some resources—such as images, stylesheets, or scripts—over an insecure HTTP connection. Browsers may block these resources or display a warning, even though the main page is encrypted.

  1. Open your website in Google Chrome or Microsoft Edge.
  2. Right-click anywhere on the page and select Inspect, or press F12 to open Developer Tools.
  3. Click the Console tab.
  4. Look for messages labelled “Mixed Content” that list insecure http:// URLs.
  5. Edit your website’s code or content management system settings to replace those URLs with https:// equivalents.
  6. If you use a CMS such as WordPress, update the WordPress Address and Site Address under Settings > General to use https://, then use a search-and-replace plugin to update internal links in your database.
  7. Clear your site cache and browser cache, then reload the page.

Certificate Expired or Not Trusted

  1. Click the padlock icon in the browser address bar and select Connection is secure or Certificate.
  2. Check the expiry date listed in the certificate details.
  3. If the certificate has expired, log in to your hosting control panel or certificate authority account and renew it.
  4. After installation, restart your web server if required to apply the new certificate.
  5. Use an online SSL checker tool to confirm the certificate is valid and trusted by browsers.

Browser Still Shows “Not Secure”

  1. Ensure all pages, not just the homepage, are loading over https://.
  2. Check for hard-coded http:// links in your theme, plugins, or website files.
  3. Verify that your HTTPS redirect is active and functioning correctly.
  4. Clear your browser cache or test in an incognito/private browsing window.
SSL certificates typically need to be renewed every one to two years, depending on the type issued. Set a reminder well before the expiry date to avoid service interruptions and security warnings.

Maintaining a valid SSL certificate and enforcing HTTPS across your website protects your visitors, supports your search engine rankings, and reinforces trust in your Australian business. If you need assistance installing, renewing, or troubleshooting your certificate, Open a Ticket.

Remember — If you host with us, you don't need to do this yourself — just Open a Ticket and our Brisbane team will get it sorted.

Still Having Issues?

Need more help? If the issue persists after trying these steps, please open a support ticket and our team will assist you.

đź’» Open a Ticket

Related Articles