Short answer: every website needs SSL (HTTPS). For most websites, the free SSL included with SiloLobby hosting is all you need: the encryption is just as strong as a paid certificate's. Buy a paid certificate when you want your organisation's identity verified (OV), need a warranty and certificate-authority support, or your customers or partners require it. Paid certificates at SiloLobby start at ₦12,000/year.
The difference between free and paid SSL is one of the most misunderstood topics in web hosting, and some providers use the confusion to upsell certificates people do not need. This guide explains what SSL does, what you actually get when you pay, and how to decide.
What SSL does
SSL (more precisely TLS) encrypts the connection between your visitor's browser and your website. With it:
- passwords, card details and form entries cannot be read or changed in transit,
- your address shows https:// and the padlock,
- browsers do not show "Not secure" warnings,
- Google treats HTTPS as a positive signal.
Without it, browsers warn visitors before they type anything, which costs you trust and sales.
What a certificate actually proves
An SSL certificate is issued by a certificate authority after checking that you control the domain, and in some cases that your organisation is real. The encryption strength is the same across certificate types; what differs is how much is verified.
| Type | What is checked | Typical use | At SiloLobby |
|---|---|---|---|
| Free DV | You control the domain | Blogs, business sites, most shops | Included with hosting |
| Paid DV | You control the domain | Sites wanting a warranty and vendor support | RapidSSL ₦12,000/year, GeoTrust ₦25,000/year |
| OV | Your organisation is legally registered and real | E-commerce, finance, corporate and government work | DigiCert OV ₦45,000/year |
- DV (Domain Validation): issued within minutes after proving control of the domain.
- OV (Organisation Validation): the certificate authority verifies your company's registration and details before issuing; your organisation's name appears in the certificate details.
When free SSL is enough
- Company and portfolio websites
- Blogs, news and community sites
- Landing pages and campaign sites
- Online shops where card payments happen on the payment provider's own secure page (such as Paystack or Flutterwave checkout)
For these sites, a free certificate gives exactly the same protection to your visitors.
When a paid certificate makes sense
- You collect sensitive data or payments on your own pages.
- Corporate, banking or government clients require organisation validation in their supplier checks.
- You want a warranty and direct support from the certificate authority.
- You need a certificate for a server, app or service outside your hosting, such as a VPS, mail server or API.
- Your compliance or insurance requirements specify a commercial certificate.
How free SSL works at SiloLobby
On shared, WordPress and reseller hosting, a free certificate is issued automatically once your domain points to your hosting, and renewed automatically before it expires. You can check its status in cPanel under SSL/TLS Status.
How to check your SSL is working
- Visit your site with https:// and click the padlock to see the certificate details and expiry date.
- Make sure http:// redirects to https:// (in WordPress, both site addresses in Settings → General should start with https).
- Check for mixed content: images, scripts or styles loaded over http. Update those links to https.
- Use an online SSL checker to confirm the certificate chain is complete.
Common SSL problems
| Problem | Cause | Fix |
|---|---|---|
| "Not secure" warning | No certificate, or the site loads over http | Install SSL and redirect http to https |
| Padlock missing on some pages | Mixed content | Change resource links to https |
| Certificate name mismatch | Certificate does not cover www or a subdomain | Include both names, or redirect one to the other |
| Certificate expired | Auto-renewal failed, often after DNS changes | Check DNS points to your hosting; contact support |
SSL for email, apps and servers
SSL is not only for websites:
- Email: your email apps connect securely using SSL/TLS on IMAP, POP and SMTP.
- APIs and apps: mobile apps and integrations should only talk to your server over HTTPS.
- Cloud servers: on a VPS you can install a free certificate yourself, or a paid certificate if your clients require one.
Renewal and validity
Certificates have a limited lifetime, currently around a year for paid certificates and shorter for free ones that renew automatically. Industry rules are moving towards shorter certificate lifetimes, which is why automatic renewal matters. On SiloLobby hosting, free certificates renew themselves; paid certificates come with renewal reminders.
Buying a paid certificate: the process
- Choose the certificate type (DV or OV).
- Generate a certificate signing request (CSR) on your server or in cPanel.
- Complete validation: for DV, prove control of the domain; for OV, provide company details for verification.
- Install the issued certificate.
- Test it and set up HTTPS redirects.
Our team can install paid certificates for you.
A quick decision guide
| Your situation | Choose |
|---|---|
| Business website or blog | Free SSL |
| Shop using a hosted payment page | Free SSL |
| Shop or portal handling sensitive data on your own pages | Paid DV or OV |
| Supplier checks require verified organisation details | OV |
| Server or app outside your hosting | Paid DV, or a free certificate you manage |
Myths about SSL
"Paid certificates encrypt better." No. Encryption strength depends on the server configuration, not the price of the certificate.
"SSL makes my site slow." Modern HTTPS adds almost no delay, and it unlocks faster web protocols.
"I only need SSL on my checkout page." Every page should use HTTPS; browsers flag any page without it.
"SSL protects my site from hackers." SSL protects data in transit. It does not stop malware or weak passwords; see the security checklist.
What visitors actually see
Modern browsers show the same padlock for free and paid certificates. Visitors can click the padlock to view certificate details: an OV certificate shows your verified organisation name there. For most visitors, what matters is simply that the padlock is present and there are no warnings, which is why every page on every site should use HTTPS.
SSL and search engines
HTTPS has been a lightweight ranking signal for years, and secure pages are a basic expectation of both search engines and browsers. Moving from HTTP to HTTPS will not by itself push you to the top of results, but staying on HTTP holds you back and drives visitors away with warnings. When you switch, redirect every HTTP address to its HTTPS version so you keep any rankings you have earned.
Summary
All websites need SSL, and for most of them the free certificate included with SiloLobby hosting gives full protection. Choose a paid DV certificate for a warranty and vendor support, or an OV certificate when your organisation's verified identity matters to customers and partners. Whichever you use, redirect everything to HTTPS and fix mixed content.