CA

How it works

• The authority checks that you control the domain, then signs a certificate tying your domain to a key.
• Browsers carry a list of trusted authorities and follow the chain back to one of them.
• If the dates, the name and the signature line up, the padlock appears.
• Free authorities such as Let's Encrypt issue short-lived certificates that renew automatically.

What can go wrong (example scenario)

A contractor's website certificate expired on a weekend. Every visitor saw a full-page “Your connection is not private” warning. Three quote requests that week went to a competitor whose site simply loaded.

How WILDCARD handles it

Domain Security keeps your domain's DNS correct, which certificate checks depend on. Managed Hosting runs the site and keeps the certificate renewing.

• A law firm's client portal must show a valid certificate or clients will refuse to upload documents.
• A retailer's online store needs a certificate that covers both shop.example.ca and www.example.ca.
• A non-profit's donation page shows a browser warning after a certificate lapse, and donations stop for a weekend.

Example scenario: A small dental practice moved their website to a new host. The old host's certificate kept renewing for a domain it no longer served, while the new host never issued one. Patients saw warnings for a week. One DNS validation record for the new host fixed it in minutes.

A question owners ask

Do I have to pay for a certificate?

Usually no. Free CAs issue certificates that browsers fully trust, and most hosts renew them automatically. Paid certificates add things like extended validation, which most small businesses do not need.