HTTPS for Business Websites: What to Check

HTTPS protects information in transit between a visitor's browser and your website. It is a basic expectation for a business site, especially one with contact forms, account logins, or checkout. This older article's title reflects the time of Google's announcement; the practical task today is to keep HTTPS working everywhere on the site.

Check more than the padlock

Visit the site's main pages using an HTTP URL and confirm they redirect to HTTPS. Check that the certificate covers the right hostnames and renews before expiry. Forms and account pages should submit over HTTPS, and embedded images or scripts should not load through insecure HTTP links.

Understand the limits

A certificate encrypts a connection; it does not prove that a company is trustworthy or that the server is secure. Continue updating software, protecting accounts, and reviewing backups. Avoid claims that HTTPS alone will produce better rankings.

Make ownership clear

Record who manages certificates, DNS, redirects, and renewals. If a domain or hosting move is planned, test HTTPS again after the change. A missed renewal can interrupt customer access even when the website itself is otherwise healthy.

When reviewing web hosting plans, ask whether certificate setup and renewal are included, and how failures are monitored. The goal is a reliable, secure connection that visitors can use without warnings.