SSL/TLS certificate planning for your domain

A certificate is one part of HTTPS

TLS certificates help browsers authenticate a hostname and encrypt traffic to the configured endpoint. A reliable deployment also needs correct DNS, a complete certificate chain, secure server settings, redirects, and a renewal process that is tested before expiry.

Certificate automation or commercial certificate options vary by HostGanga hosting product. Check live plan details or ask the team to confirm validation, installation, wildcard, and renewal support for your domain.

Hostname coverage

List the apex domain, www, and required subdomains before choosing single-name, multi-name, or wildcard coverage.

Validation readiness

Ensure you control the relevant DNS or web endpoint and can complete the certificate authority challenge.

Renewal operations

Automate where supported, alert before expiry, and verify that renewed files are actually loaded by the service.

Deploy HTTPS without breaking the site

Confirm DNS reaches the intended server, install the certificate and intermediate chain, then test every hostname. Update internal links and application URLs before enforcing redirects. Review mixed content, secure cookies, proxy headers, and webhook destinations.

• Keep private keys restricted and out of repositories
• Test from an external browser and certificate checker
• Enable strict transport policy only after HTTPS is consistently correct

Track the full certificate lifecycle

Record who owns each hostname and where TLS terminates: web server, control panel, CDN, or load balancer. Removal of an old server should include revoking or securely deleting its key material when appropriate.

Frequently asked questions