Free SSL covers most sites
Let's Encrypt issues free domain-validated (DV) certificates that most hosting control panels install in one click. Cloudflare gives every site on its free plan a certificate at the edge. Both give the same encryption and padlock as a paid DV certificate.
That is enough for shops, blogs, portfolios, school and NGO sites, and landing pages.
When a paid certificate makes sense
Organisation validated (OV) and extended validation (EV) certificates include a check that your company exists, and the company name appears in the certificate details. Banks, payment companies and some government or enterprise contracts ask for them.
Wildcard certificates cover every subdomain (*.yourname.com). Let's Encrypt offers free wildcards too, but they need DNS validation, which some hosts do not automate.
How to check a certificate
Our free SSL checker shows the issuer, the dates, how many days are left, and every domain the certificate covers. Check it after installing, and again a couple of weeks before it expires if renewal is not automatic.
Setting up email on the same domain? The email checker confirms SPF and DMARC so your mail is not marked as spam.