SSL / Security issues for SEO

What issue is this page dealing with?
SSL errors can be detrimental to your website's ranking and security. Learn how to identify, fix, and prevent SSL-related issues to ensure a smooth user experience and maintain compliance with security standards like PCI.

Want a free audit?

Send me an email with your URL and I’ll spin up a top level SEO audit, free of charge. If you want a slightly more advanced one; just add me to your Google Search Console (email is the same). 

What I cover here

SSL feels normal nowadays, I remember when it was initially launched as a ranking factor – everyone scrambling to get their website SSL certification. The old issues used to be getting the SSL certificate onto the website, looking at non-SSL links and assets and updating them accordingly, now I see a lot of errors with the code, either breaking SSL or handling it incorrectly. 

Having broken or ineffective encryption on your site can cause some big issues, not just from a ranking perspective but can also hurt PCI compliance – if you are an online trading website. SSL vulnerabilities can open up issues around hacking too; that can create blind spots whereby data transferring is not encrypted and can be intercepted. Nobody wants that. Because of this, there are robust procedures in place to identify common denominators when it comes to fraud. You don’t want to be at the receiving end of a PCI forensic investigation. 

How do I identify SSL errors?

A good starting point is to carry out a site-wide crawl, tools such as SiteBulb and SEMRush provide specific SSL auditing facilities. I see a few trip points here being subdomains set up many years ago, old web pages still internally linking to http:// and non-SSL content not redirecting to https:// – which can cause some issues. You can also rely on Googlebot to see if there are any issues too, this can be seen via Search Console > Settings > Crawl stats.

How do I fix SSL errors?

For the most part, a lot of the fixes revolve around creating a universal redirection from http to https – this is a fallback option. I’ve often created this within the .htaccess file which will globally apply it to the site. I would then advise reducing the number of links on the site to non-http, assessing both on-site code and external links. You can also utilise a CDN such as Cloudflare which will divert all your traffic through to SSL too – providing a layer of protection.

How do I prevent SSL errors?

Typically once you set up an SSL certificate on your site and ensure all pages are being served through it; it’s just a case of renewing it each year. You also need to pay attention to how you are linking too; ensuring all links start with HTTPS. As part of SEO hygiene, I’d always recommend running robust auditing software on a site once per month or bi-weekly, which will often raise any issues around SSL.

Additional comments around SSL and it's impact on SEO.

     

      1. Typically, I don’t see any variation between shared SSL and private ones unless the site is getting a lot of traffic then perhaps investing in a private one may help with the professional identity of the company.

      1. Cloudflare and other CDNs are often an easy way to get free SSL as part of their package, it can also help with installing it as a lot of it is done automatically.

      1. There are some fantastic plugins which can manage SSL on your behalf; I use Really Simple SSL on this WordPress site and it hasn’t missed a beat to date.

      1. Domain-level issues tend to revolve not only around SSL certificates but you can also run into some issues with DNS settings and errors – worth keeping note in the event you are going through troubleshooting.

      1. Fitting in very nicely with this specific error would be old security protocols, which often tie into the connections into your server and can cause havoc with your SEO and website continuity.

    Need CMS specific SEO support?  I’ve got extensive experience working with the below CMS – view each service page to learn more. I’ve also include some additional links which may be useful for that particular CMS.

    Would you like a free SEO audit? 

    Enter your details in the form here and I’ll run a top level audit of your website, it shouldn’t take long and will give you some basic information on your site’s health. 

    In addition to getting a free audit, if you are stuck on a particular problem, do feel free to reach out to me – I’m always happy to help fellow SEO experts answer any questions.