The padlock version of a web address: the page is encrypted between the site and your browser so nobody in between can read or change it.
Like a sealed, tamper-evident envelope in place of a postcard: the courier carries it but cannot read it.
A four-person consulting firm's site loaded over HTTP. Chrome showed a βNot secureβ label beside their name. A prospect mentioned it on a call and asked whether the firm took security seriously. The site had nothing wrong with it except the missing certificate.
Managed Hosting runs the site with HTTPS on and HTTP redirected. Domain Security keeps the DNS behind it correct.
Example scenario: A small physiotherapy clinic noticed bookings dropping. Their site loaded over HTTPS on the www address but plain HTTP on the bare domain, which is what the Google listing used. Visitors saw a warning and left. A redirect from HTTP to HTTPS on both addresses brought the bookings back.
My site is just a brochure. Does it still need HTTPS?
Yes. Browsers flag HTTP pages, search engines rank them lower, and HTTPS also stops anyone from altering your page in transit. It is free with most hosts.

Every WILDCARD card exists to solve one named problem. Find yours.