SSL certificate

What is an SSL certificate?

An SSL certificate is a small data file that confirms who owns a domain and makes it possible to open an encrypted connection over HTTPS. The certificate is the basis for the TLS handshake between browser and server, so data in transit cannot be read or tampered with. The name “SSL” sticks out of habit — in practice modern certificates use the TLS protocol, since the original SSL versions have been deprecated for security reasons.

Why does an SSL certificate matter?

Without a valid certificate, Chrome and other browsers show a “Not secure” label in the address bar, which kills trust right before checkout. For an online store that is critical: customers enter addresses and payment details, and a warning here costs conversions directly. On top of that, Google confirmed HTTPS as a (lightweight) ranking signal back in 2014, so a correct certificate is both a trust and an SEO matter.

Common use cases

• Securing the https:// connection across the whole store so all traffic is encrypted.
• Activating a valid certificate on a connected domain after a CNAME or A record lookup.
• Debugging “mixed content” where images or scripts are still loaded over http://.
• Renewing certificates automatically so they never expire and trigger browser warnings.

Shopify perspective

Shopify automatically issues and renews a free TLS/SSL certificate for both your myshopify.com domain and connected domains — at no extra cost and via a recognized certificate authority. For a custom domain, though, the certificate is only issued once DNS points correctly to Shopify, and the process can take up to 48 hours. If you see an “SSL unavailable” error in the admin, it is almost always caused by incorrect DNS records, not by Shopify itself.