Domains, Hosting and SSL: Keeping the Basics Under Control

Your domain name, your hosting and your SSL certificate are not exciting. Nobody chooses a supplier because of them. But when one of them fails, your website and often your email stop working, and the fix can take far longer than it should if nobody knows where the accounts are.

This article covers the practical steps that keep these foundations under control, so that renewals, changes and emergencies are routine rather than stressful.

Know what you have and who owns it

Start with a simple inventory. For each of the items below, write down the provider, the account login owner, the renewal date and the cost:

• Domain registrar: the company your domain is registered with.
• DNS provider: where your DNS records are managed. This is often the registrar, but it may be your host or a separate service.
• Web hosting: where your website files and database live.
• Email hosting: which may be completely separate from your web hosting.
• SSL certificate: who issues it and how it is renewed.

The most important question is ownership. The domain and hosting accounts should be registered to your business and controlled by someone in your business, even if a supplier manages them day to day. Many businesses discover, only when they change agency, that their domain was registered in a former supplier’s name. Untangling that can be slow and uncomfortable.

Domains: small details, big consequences

Protect the renewal

An expired domain takes your website and email offline. Registrars usually offer a grace period, but relying on it is risky. To avoid problems:

• Switch on auto-renew and keep a valid payment card on the account.
• Make sure renewal reminders go to a shared business inbox, not the personal email of someone who might leave.
• Consider renewing for several years at a time for your main domain.

Lock it down

• Turn on the registrar lock, sometimes called transfer lock, so the domain cannot be moved without your approval.
• Use a strong, unique password and two-factor authentication on the registrar account.
• Keep the registrant contact details accurate. Some changes and transfers require confirmation by email.

Understand your DNS records

DNS tells the internet where to find your website and where to deliver your email. You do not need to be an expert, but it helps to recognise the main record types:

• A and AAAA records point your domain to a server address.
• CNAME records point one name to another, often used for the www version or third-party services.
• MX records tell other mail servers where to deliver your email.
• TXT records hold verification codes and email authentication settings such as SPF, DKIM and DMARC.

Before anyone changes DNS, take a screenshot or export of the current records. A mistaken edit to an MX record can stop email arriving, and having the previous values to hand makes it quick to put right.

Hosting: match it to the job

Hosting ranges from low-cost shared plans to dedicated servers and managed cloud platforms. The right choice depends on your traffic, your platform and how much technical work you want to do yourself. Whatever you choose, check the following:

• Backups. How often are they taken, how long are they kept and how do you restore one? Keep your own additional backups too, stored away from the host.
• Software versions. Your host should support current versions of the server software your site depends on, such as PHP and the database.
• Resources. If your site regularly hits memory or processing limits, pages will slow down or fail at busy times.
• Support. Know how to reach support, what hours they cover and what they will and will not help with.
• Location and speed. Hosting closer to your main audience, or a content delivery network, can help pages load faster.

Review your hosting once a year. Sites grow, and a plan that suited a five-page brochure site may struggle with an online shop.

SSL: the padlock people expect

An SSL certificate, more accurately a TLS certificate, encrypts the connection between your website and its visitors. Browsers flag sites without one as not secure, which puts people off filling in forms or buying. HTTPS is also a lightweight ranking signal for Google.

Many hosts now provide free certificates that renew automatically. That is convenient, but automatic renewal can still fail, for example after a DNS change or a hosting move. Good practice includes:

• Knowing exactly how your certificate renews and who is alerted if it fails.
• Using an uptime or certificate monitor that warns you before expiry.
• Making sure every version of your address redirects to a single secure version, so http and non-www addresses all land on the same https URL.
• Checking for mixed content warnings, where a secure page loads images or scripts over plain http.

Keep a simple record

Bring all of this together in one document stored somewhere safe and shared with the right people. Include providers, renewal dates, which account holds what, where DNS is managed and who to call in an emergency. Keep passwords in a proper password manager rather than in the document itself.

This record is invaluable when you change suppliers, plan a website migration or need to fix something urgently outside office hours.

Key takeaways

• Your business should own and control its domain and hosting accounts.
• Use auto-renew, registrar lock and two-factor authentication on your domain.
• Back up DNS settings before changing them, and understand what MX and TXT records do.
• Check that SSL renews reliably and that all traffic lands on one secure address.
• Keep an up-to-date record of every provider, account and renewal date.

If you would rather hand this to someone who looks after it every day, SEO Fleet’s hosting management service can take care of renewals, DNS, certificates and backups, and keep ownership clearly with your business.