The padlock in the browser bar is the smallest trust symbol with the biggest story. Here is what SSL actually does.
What SSL does An SSL certificate enables https: traffic between your visitor and your server is encrypted. Without it, anything typed into your site — passwords, card numbers, phone numbers — travels potentially readable. With it, that data is scrambled end to end.
Why it is now non-negotiable - Chrome and Firefox label plain-http sites 'Not secure' — next to your business name - Google uses https as a ranking signal - Payment gateways and most integrations require it - Visitors have learned: no padlock = sketchy
The certificate lifecycle (now invisible) Certificates expire every 90 days or so; modern hosts automate issuance (Let's Encrypt) and renewal. On Kairalmas, SSL issues automatically per domain — the padlock appears without you buying, installing or renewing anything.
When you WOULD pay for SSL Extended Validation certificates and wildcard certs for many subdomains have niche uses. For a standard business site or store, free SSL is functionally identical — anyone charging you monthly for a basic padlock is selling 2010's product.
The one checklist item After connecting your domain, visit https://yoursite.com — padlock present, no warnings. If it is missing after a few hours, that is a support message, not a purchase order.
SSL used to cost PKR 15,000/year. It should cost you nothing — and at Kairalmas, it does.