My site has a padlock. Am I done?
Check that http addresses redirect to https and that no images load over http, which triggers a "mixed content" warning.
An SSL/TLS certificate encrypts traffic between a visitor and a website so the address shows https and a padlock; browsers flag sites without one as "Not secure".
Certificates expire, typically every 90 days for free Let's Encrypt certificates, and an expired one blocks visitors with a full-page warning. Modern hosts such as Vercel renew them automatically; older shared hosting often does not.
SSL is included and auto-renewed on every Studio 17 care plan, and we check it as part of the free website health check.
Check that http addresses redirect to https and that no images load over http, which triggers a "mixed content" warning.
New site, a redesign, or someone to finally look after the one you have. Tell us what you need — we reply within one business day.
Get a free quote