SSL feels normal nowadays, I remember when it was initially launched as a ranking factor – everyone scrambling to get their website SSL certification. The old issues used to be getting the SSL certificate onto the website, looking at non-SSL links and assets and updating them accordingly, now I see a lot of errors with the code, either breaking SSL or handling it incorrectly.
Having broken or ineffective encryption on your site can cause some big issues, not just from a ranking perspective but can also hurt PCI compliance – if you are an online trading website. SSL vulnerabilities can open up issues around hacking too; that can create blind spots whereby data transferring is not encrypted and can be intercepted. Nobody wants that. Because of this, there are robust procedures in place to identify common denominators when it comes to fraud. You don’t want to be at the receiving end of a PCI forensic investigation.
How do I identify SSL errors?
A good starting point is to carry out a site-wide crawl, tools such as SiteBulb and SEMRush provide specific SSL auditing facilities. I see a few trip points here being subdomains set up many years ago, old web pages still internally linking to http:// and non-SSL content not redirecting to https:// – which can cause some issues. You can also rely on Googlebot to see if there are any issues too, this can be seen via Search Console > Settings > Crawl stats.
How do I fix SSL errors?
How do I prevent SSL errors?
Additional comments around SSL and it's impact on SEO.
-
- Typically, I don’t see any variation between shared SSL and private ones unless the site is getting a lot of traffic then perhaps investing in a private one may help with the professional identity of the company.
-
- Cloudflare and other CDNs are often an easy way to get free SSL as part of their package, it can also help with installing it as a lot of it is done automatically.
-
- There are some fantastic plugins which can manage SSL on your behalf; I use Really Simple SSL on this WordPress site and it hasn’t missed a beat to date.
-
- Domain-level issues tend to revolve not only around SSL certificates but you can also run into some issues with DNS settings and errors – worth keeping note in the event you are going through troubleshooting.
-
- Fitting in very nicely with this specific error would be old security protocols, which often tie into the connections into your server and can cause havoc with your SEO and website continuity.