🔒HTTPS and SSL Certificates: The SEO Impact
Why HTTPS is a ranking signal, how mixed content breaks security, certificate types compared, and the complete migration checklist for moving from HTTP to HTTPS.
Google announced HTTPS as a ranking signal in 2014. Since then, the web has moved overwhelmingly to HTTPS — today over 95% of pages loaded in Chrome use HTTPS. If your site still serves HTTP, you face three problems: a ranking disadvantage, browser "Not Secure" warnings, and loss of referrer data from HTTPS sites.
How HTTPS Affects Rankings
HTTPS is a "lightweight" ranking factor — it won't overcome poor content but can be a tiebreaker. More importantly, Chrome's "Not Secure" warning actively deters users from continuing on HTTP sites, increasing bounce rates which can negatively affect rankings indirectly.
SSL Certificate Types
| Type | Validates | Best For | Cost |
|---|---|---|---|
| DV (Domain Validated) | Domain ownership only | Blogs, small sites | Free (Let's Encrypt) |
| OV (Organization Validated) | Domain + organization identity | Business websites | $50–200/year |
| EV (Extended Validation) | Thorough identity verification | E-commerce, banks | $200–400/year |
| Wildcard | Domain + all subdomains | Sites with subdomains | Varies |
For most websites, a free Let's Encrypt DV certificate is perfectly sufficient for SEO. EV certificates no longer show the "green padlock" company name in modern browsers.
Mixed Content
Mixed content occurs when an HTTPS page loads resources (images, scripts, fonts) over HTTP. Browsers block or warn about mixed content. Google may also downgrade your security signal. Fix by ensuring ALL resources are loaded via HTTPS — including external fonts, analytics, CDN assets.
HTTP → HTTPS Migration Checklist
- Obtain and install your SSL certificate
- 301-redirect all HTTP URLs to their HTTPS equivalents
- Update all internal links to HTTPS
- Update canonical tags to HTTPS URLs
- Update your XML sitemap to use HTTPS URLs
- Update Google Analytics property to use HTTPS
- Submit the new HTTPS property in Google Search Console
- Update any hardcoded HTTP references in code/config
- Check for mixed content with browser DevTools or a scanner
- Monitor GSC Coverage and Performance for drops post-migration
References
- [1]Google: HTTPS as a ranking signal — Original 2014 announcement — developers.google.com
- [2]Let's Encrypt — Free, automated, open SSL certificate authority — letsencrypt.org