WHAT IS AN SSL CERTIFICATE?

A digital file that: Proves ownership of a domain (authentication)

1. Encrypts the connection (confidentiality)

2. Prevents tampering (integrity)

3. Issued by Certificate Authorities (CA) like DigiCert, Let’s Encrypt, or AWS ACM.

Contains:

• Domain name

• Expiry date

• Public key

Analogy: It’s like a passport for your website — proves who you are and secures communication

Why We Need SSL Certificates

To encrypt data between users and your app so no one can spy or tamper with it. To prove your site’s identity — prevents fake sites pretending to be you. Without SSL, users see “Not Secure” in browsers and risk having data stolen.