Knowledge base
An SSL or HTTPS certificate warning is usually one of three things and none of them means your site is compromised. Here is how to tell them apart.
This covers SSL and TLS certificate warnings, HTTPS errors and a broken padlock in the address bar.
A browser warning about a certificate is alarming and is usually mundane. It does not mean your site has been broken into.
1. The certificate has not been issued yet. Certificates are issued after your domain points at us - the issuing authority has to see the domain resolving here before it will confirm you own it. If you have only just pointed the domain, wait for DNS to settle and the certificate will follow.
2. Mixed content. The certificate is fine, and the page is loading an image, script or stylesheet over plain HTTP. The browser shows a broken padlock rather than a full warning. The fix is in the page, not the certificate - usually a hard-coded http:// address in a theme or a post.
3. You are visiting a name the certificate does not cover. A certificate for example.com and www.example.com will warn on shop.example.com. Check the address bar for a subdomain you did not expect.
Try the site in a private window. Browsers cache certificates aggressively and a stale one is a genuinely common false alarm after a domain move.
Tell us the exact domain including any subdomain. Certificates are issued per name, so "my certificate expired" without the name is one round trip we both have to wait for.
What we have been writing about hosting, SEO and running sites at scale.
How hosting shapes indexing and link equity in 2026: keeping pages indexed, vetting aged domains before you build on them, link building without a footprint, and an honest line on what infrastructure can and cannot do for SEO.
Read the post →A practical checklist for fast, secure WordPress: server-level caching, a per-site object cache, the handful of plugins worth running, keeping the stack current, and the WooCommerce pages you must never cache.
Read the post →What actually separates good managed hosting from a cheap box with a control panel — migrations, backups, isolation, real caching and honest scaling — and how to judge it before you commit.
Read the post →Support is included on every plan, the desk is open 24 hours a day, and you can write to us in any of our 58 languages — we answer you in yours.
Contact support → All articles →