In this article
- What is an SSL certificate and why does your site need it?
- How do you enable SSL on Hostinger?
- How do you install SSL on GoDaddy?
- What if your site is with another provider or on your own server?
- What error messages do your customers see if the certificate is missing or wrong?
- What should you check after activation?
- The Origami view
- The bottom line
To enable an SSL certificate on your website, start with your hosting provider. Hostinger installs a free certificate automatically for every domain and subdomain on its plans, and if it does not appear you can activate it with one click in hPanel. At GoDaddy, Managed WordPress and the website builder come with a certificate already installed, while on cPanel hosting you upload the certificate manually from the SSL/TLS section. If your site runs on your own server, Let's Encrypt is free through the Certbot tool, or through Cloudflare if your domain is there. After activation, send all traffic to HTTPS and make sure renewal is automatic.
What is an SSL certificate and why does your site need it?
An SSL certificate, more precisely TLS, encrypts the connection between a visitor's browser and your site, so nobody in between can read the login details, numbers or messages a visitor types. It shows in the address bar as https with a padlock icon. Without it, browsers show a warning that makes visitors hesitate, especially on payment and contact pages. That is why the certificate is now a basic requirement for any business website, not an extra.
Note that certificate validity is shrinking: the maximum today is 200 days, down from 398 days until 15 March 2026, falling to 100 days on 15 March 2027 and then to 47 days on 15 March 2029, under the CA/Browser Forum ballot. Manual renewal is no longer practical; we explained the details in SSL certificate validity is dropping to 47 days.
How do you enable SSL on Hostinger?
According to Hostinger's help center, all web, cloud and agency hosting plans include a free lifetime SSL certificate for every domain and subdomain. It installs automatically once the domain is added to the plan and pointed to Hostinger, and it renews automatically as long as the site is hosted there. If it does not install automatically:
- Open the Hostinger dashboard and go to Websites.
- Click Dashboard next to the domain or subdomain.
- In the sidebar, open Security, then SSL.
- Click Install SSL and wait a few minutes until the status changes from Installing to Active.
- Open your site in an incognito window to confirm the padlock appears.
If your Hostinger hosting uses cPanel, the certificate installs automatically within a few hours of pointing the domain to their nameservers, and manual installation is under Security, then SSL/TLS, according to their cPanel guide.
How do you install SSL on GoDaddy?
GoDaddy says Websites + Marketing, Managed Hosting for WordPress and Managed Hosting for WooCommerce come with a built-in certificate that is already installed, so you do not need to buy a separate one. If you bought a certificate for cPanel hosting, the manual installation steps are, in short:
- Download the certificate file (.crt) from the SSL manager in your account once the request is approved.
- From your products page, choose Web Hosting, then Manage, then cPanel Admin.
- In the Security section, open SSL/TLS and upload the certificate under Upload a New Certificate.
- Go back to Manage SSL Sites, pick the certificate under Browse Certificates, then Use Certificate, then Install Certificate.
- Turn on the automatic HTTP to HTTPS redirect as the redirect page explains.
GoDaddy notes that Deluxe, Extended Validation (EV) and additional-domain certificates must be installed manually, and that it offers a paid managed SSL service that installs it for you.
What if your site is with another provider or on your own server?
| Your situation | How | Cost |
|---|---|---|
| Shared hosting with any provider | Look for SSL or Let's Encrypt in the control panel; many providers issue it automatically | Usually free |
| Your own server (VPS) | Run Certbot to issue a Let's Encrypt certificate and renew it automatically | Free |
| Your domain is on Cloudflare | Universal SSL is issued and renewed automatically for every active domain | Free |
| You need the company's identity in the certificate | A paid OV or EV certificate from a trusted certificate authority | Paid |
According to Let's Encrypt, many hosting providers issue and manage its certificates for you; if yours does not and you can run commands on the server, it recommends Certbot. Cloudflare says it issues a free certificate for every domain added and activated on it, covering the root domain and first-level subdomains, and renews it automatically.
What error messages do your customers see if the certificate is missing or wrong?
These are the messages your visitor sees in Chrome, worded as Google documents them on its connection security page and its common error messages page, with the cause and fix for each:
| What the customer sees | Most likely cause | Fix |
|---|---|---|
| "Not secure" next to the site address | The site runs on http without a certificate, or a page has mixed content | Enable the certificate and the HTTPS redirect, and fix http links inside the page |
| A "Connection is not secure" warning | The visitor turned on Always use secure connections, and your site does not support HTTPS | Enable the certificate and HTTPS on every page |
| A full page "Your connection is not private" with NET::ERR_CERT_DATE_INVALID | The certificate has expired, or the visitor's device clock is wrong | Renew the certificate now and turn on automatic renewal |
| "Your connection is not private" with ERR_CERT_COMMON_NAME_INVALID | The certificate does not match the domain name, such as one covering the domain without www only | Issue a certificate that covers all your site's names |
| "Your connection is not private" with NET::ERR_CERT_AUTHORITY_INVALID | A certificate from an untrusted authority, a self-signed certificate, or missing intermediate certificates | Use a trusted certificate authority and install the full certificate chain |
| "This webpage is not available" with ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Outdated encryption settings on the server | Update the server's TLS settings or ask your hosting provider to |
| A red screen marked "Dangerous" | Not a certificate problem: the site has been reported as unsafe | Scan the site for malware and check Search Console |
Google notes that NET::ERR_CERT_AUTHORITY_INVALID can also appear for employees behind a company proxy that inspects HTTPS traffic, so confirm the problem appears outside your company network before you start fixing it.
What should you check after activation?
- HTTPS redirect. Open your site by typing http without the s; it should move to https automatically.
- Mixed content. If the padlock looks broken, some images or files still load over http; update them to https.
- Every subdomain. Make sure www, your store and other subdomains are all covered.
- Automatic renewal. Set a reminder before expiry, because an expired certificate brings the warning back for every visitor.
The Origami view
The certificate is a first step, but site security and customer trust need more: correct redirects on every page, monitored automatic renewal, secure server settings, backups and regular vulnerability checks. At Origami we build websites and systems and secure them from the start, and we can review your current site and add the security layers it needs, whichever hosting provider you use.
If you want us to review your site's security and strengthen your customers' trust, see our services.
The bottom line
Enabling SSL is now easy and free in most cases: automatic on Hostinger, built into GoDaddy's managed plans, manual on cPanel hosting, and free through Let's Encrypt or Cloudflare for anyone running their own server. What matters most after activation is a full HTTPS redirect and automatic renewal, because certificates are getting shorter and expire faster than before.
Sources: Hostinger's help center on the free SSL certificate: https://www.hostinger.com/support/1583258-how-to-install-lifetime-ssl-at-hostinger/ , Hostinger's cPanel guide, GoDaddy's help pages on setting up, installing and redirecting to HTTPS, Let's Encrypt's getting started page, and Cloudflare's Universal SSL documentation.
Frequently asked questions
Is an SSL certificate free?
In most cases, yes. Hostinger includes it free for life on its hosting plans, and Let's Encrypt and Cloudflare offer it free. You only pay if you need an OV or EV certificate that proves the company's identity, or a managed service.
How do I know SSL is working on my site?
Open your site and check that the address starts with https and shows a padlock, then type the address with http and confirm it redirects to https automatically.
Why does my site still show as not secure after enabling SSL?
Usually because of mixed content, meaning images or files still load over http, because the HTTPS redirect is not enabled, or because the certificate does not cover the subdomain you are opening.
How long does Hostinger's certificate take to work?
Hostinger says manual installation in hPanel finishes within minutes, and on cPanel hosting it installs automatically within a few hours of pointing the domain to its nameservers.
Do I need to buy an SSL certificate from GoDaddy?
Not always. Websites + Marketing and Managed WordPress and WooCommerce come with a certificate already installed. cPanel hosting needs a certificate you buy and install manually or through the managed SSL service.
How often do I renew an SSL certificate?
Maximum certificate validity is shrinking step by step to 47 days in 2029, so rely on automatic renewal from your host or Certbot instead of renewing by hand.
Follow Origami in Google
Pin Origami as a preferred source and our articles will surface first for you in Google Search and Top Stories.
