The Internet Marketing Driver

  • GSQi Home
  • About Glenn Gabe
  • SEO Services
    • Algorithm Update Recovery
    • Technical SEO Audits
    • Website Redesigns and Site Migrations
    • SEO Training
  • Blog
  • Contact GSQi

A Wolf in Panda’s Clothing – How An Expired SSL Certificate Could Impact Organic Search Traffic

September 27, 2013 By Glenn Gabe 1 Comment

Share
Tweet
Share
Email
17 Shares

Summary: How I helped an ecommerce retailer recover from Panda in eight days, when it was never Panda in the first place.

Expired SSL Certificate Impacting SEO Traffic

A few weeks ago, I had a business owner reach out to me about a potential Panda hit.  His initial email to me was similar to many others I have seen.  He noticed a large drop in Google organic search traffic on a specific date.  And that specific date lined up with an alleged Panda update.  In addition, it was an ecommerce site, which can be susceptible to the wrath of Panda for several reasons.  For example, duplicate content, thin content, technical problems causing perceived content quality issues, etc.

Shortly after receiving the email from the business owner, I also received a call from him.  Yes, he was eager to get moving on recovering from Panda.  It wasn’t long before our call took a left turn, and it was a path this business owner would end up liking.  In addition, it emphasizes an incredibly important point about SEO, Panda, Penguin, and other algorithm updates.  Read on.

It Sure Looks like Panda, But…
Yes, the date of the traffic hit lined up with Panda, but is that enough to clearly say the site was indeed hit by our cute, black and white friend?  Sure, he ran a relatively large ecommerce site, which can open itself up to getting by Panda for several reasons (some of which I mentioned earlier).  But, there are a few points that I firmly believe when it comes to algorithm hits:

1. You need to make sure you know which algorithm update hit your site, or if you were instead hit by a manual action.

2. A thorough SEO audit should be conducted to identify the various problems that could be impacting the site from a Panda, Phantom, or Penguin standpoint.  To me, thorough SEO audits through the lens of an algo update are worth their weight in gold.

So, I asked for the domain again and was planning on performing some checks while we were on the phone.  I wanted to make sure this truly looked like a Panda hit.  One important thing I’ve learned over the years… you never know what you are going to find once you dig in.

Analyzing the Site… Wow, That Was Quick!
I entered the domain name in Chrome and BOOM, I saw the red screen of death.  You know, the one that flags an expired SSL certificate.  It’s scary enough that most people won’t venture any deeper.  I quickly asked the business owner if he was aware of the situation.  He explained that he wasn’t technical, but he knew there was some type of issue with the certificate.  He said his developer had been looking into the problem, but that nothing had changed.

An expired SSL certificate warning in Chrome:
Expired SSL Certificate Warning in Chrome

An expired SSL certificate warning in Firefox:
Expired SSL Certificate Warning in Firefox

So, I checked in Firefox, and BOOM, the same scary message showed up.  I asked if the SSL certificate problem started recently.  He explained that the problem first showed up about the same time he saw the drop in organic search traffic.  So I stopped reviewing the site immediately and explained that we might have just found a “Wolf in Panda’s Clothing”.

The expired SSL certificate was throwing a serious security barrier between his prospective customers and his website.  And the red screen of death is nothing to sneeze at.  The message warning users about the SSL certificate could very well be stopping visitors in their tracks.  And that is what could be impacting the site’s traffic from organic search.  That was my theory anyway.

A Note About SSL Certificates (Along With Expert Information and Advice)
If you run an ecommerce site, then it’s important to understand what an SSL certificate is, and how it can impact your business.  SSL certificates activate the padlock in a web browser when visiting secure sites, and it’s what allows data being sent between the server and the browser to be encrypted.  You can actually view a website’s SSL certificate by right clicking on the padlock and clicking “View Certificate”.  So, if your certificate is expired, the browser is going to warn the user about this.  And that warning could send them running from your website faster than you can say “identify theft”.

Example of an SSL Certificate for JCrew

To explain more about SSL certificates, I asked Brad Kingsley from ORCSWeb for some information.  Brad runs ORCSWeb, which is one of the best hosting providers I have seen in my 18+ years of digital marketing work.  Brad pointed me to Terri Donahue, a Senior Support Specialist and IIS MVP.

Here is a direct quote from Terri:
“An SSL certificate is used to encrypt sensitive data that is being transferred over an insecure network such as the Internet. Without an SSL implementation, when data is transmitted between your server and the recipient of the requested data, it is visible at each ‘hop’ along the way. With an SSL implementation, the data is encrypted until it reaches the destination computer that requested it. This protects the data, such as your credit card number, and ensures that only the requesting entity can decrypt the data for actual viewing.”

“There are a number of trusted Certificate Authorities (CAs) that issue SSL certificates. When purchasing an SSL certificate, these CAs verify the identity of the requestor before issuing the certificate. SSL certificates can be purchased with varying lengths of validity. The shortest term is 1 year with some CAs offering up to 10 years.”

“There are certificate chains that are included in every SSL certificate. The CA has a root or top-level certificate and intermediate certificates that chain to the actual issued SSL certificate that a user purchases. If any of these intermediate chains are not installed on your web server, visitors receive an error when accessing the secured pages of the website. Each vendor is different in the way that these intermediate certificates are obtained. To ensure that all necessary certificate chains are installed, you can check your implementation using this site. This will verify that your certificate is valid and display the full certificate chain.”

SSL Certificate Checker

And here is some important information from Terri regarding SSL certificate expiration (which is exactly what was impacting the business owner I was helping):

“Certificate expiration is handled differently by each CA. Some send notifications to the email address used when the certificate was purchased, while others do not provide any notification. If the CA does not provide notification of expiration, there are multiple ways to handle this. Here is a blog post that refers to a script that can be used to check the expiration of an SSL certificate and send an email when the threshold before expiration is reached. Another way to do this would be to create a database that is maintained with the SSL name and expiration date, which is then monitored, and sends an email at a set period prior to the expiration date.”

—————————

Based upon the information Terri provided, you can see that SSL certificates are pretty important.  And since each Certificate Authority (CA) handles expiration differently, expired SSL certificates can throw a wrench into an ecommerce operation pretty quickly.  Now back to our Panda, I mean SSL, problem and how the business owner at hand worked to rectify the situation.

The Quick Fix & The Panda Has Been Exiled
I explained to the business owner that he should address this problem ASAP (like right after we get off the call).  I explained that he should contact me once he renews his SSL certificate, so I could take a quick look to make sure the problem was fixed, and that the red screen of death was gone.  Then we could see if his Google organic search problem turns around.

I received an email from the business owner two days later, and low and behold, his problem was gone.  The mighty Panda had been exiled!  OK, maybe not, but at least the website was humming again with Google organic search traffic.  And that meant revenue was returning to its correct levels.  And yes, this was incredibly important since holiday season was quickly approaching.  The red screen of death would not be good for holiday sales, even if it was red and white like a candy cane. :)

Key Points About SSL Certificates and SEO:
Before I end this post, I wanted to provide some key learnings based on this case study.  If you are an ecommerce retailer, the following bullets could save you from the pain that this business owner felt while his traffic plummeted.

  • Although some business owners aren’t technical, you must understand the ins-and-outs of ecommerce.  That means understanding more about SSL certificates, how they work, when they expire, and other problems that could occur that would inhibit customers from reaching your site.
  • Work with your hosting provider and developer(s) to make sure there are periodic checks of your SSL certificate.  That could nip any serious issues in the bud.  And this includes checking the site across browsers and devices to ensure all is ok.  Avoid the red screen of death at all costs.
  • Keep a master document with information about your SSL certificates, including the certificate authority (CA) that granted the certificate and the expiration date.  Set reminders so you don’t get caught at the last minute (or after the fact).  And you can use the techniques Terri listed above to automate the process of knowing when your certificates will expire.
  • From an SEO standpoint, make sure you know which algorithm update hit your site (or if one hit the site at all).  I worked with this specific business owner to guide his efforts (which led us to the SSL issue without the need for a full-blown Panda audit).  There are times that SEO problems aren’t really SEO problems.  Technical issues that appear at the same time algorithm updates hit can be confusing.  Don’t waste your time, money, and resources tackling the wrong problems.

Summary – Recovering From Panda in 8 Days Can Only Happen If It’s Not Actually Panda
I wish Panda victims could recover in just eight days.  Unfortunately, that’s not the case.  There’s a lot of work that needs to be done to recover from Panda or Phantom.  Luckily for this business owner, Panda didn’t impact his website.  Instead, it was an ecommerce gremlin that attacked his SSL certificate.  And that gremlin was a lot easier to get rid of than a Panda.

GG

Share
Tweet
Share
Email
17 Shares

Filed Under: algorithm-updates, google, seo

Connect with Glenn Gabe today!

Latest Blog Posts

  • Google’s December 2020 Broad Core Algorithm Update Part 2: Three Case Studies That Underscore The Complexity and Nuance of Broad Core Updates
  • Google’s December 2020 Broad Core Algorithm Update: Analysis, Observations, Tremors and Reversals, and More Key Points for Site Owners [Part 1 of 2]
  • Exit The Black Hole Of Web Story Tracking – How To Track User Progress In Web Stories Via Event Tracking In Google Analytics
  • Image Packs in Google Web Search – A reason you might be seeing high impressions and rankings in GSC but insanely low click-through rate (CTR)
  • Google’s “Found on the Web” Mobile SERP Feature – A Knowledge Graph and Carousel Frankenstein That’s Hard To Ignore
  • Image Migrations and Lost Signals – How long before images lose signals after a flawed url migration?
  • Web Stories Powered by AMP – 12 Tips and Recommendations For Creating Your First Story
  • Visualizing The SEO Engagement Trap – How To Use Behavior Flow In Google Analytics To View User Frustration [Case Study]
  • The May 2020 Google Core Update – 4 Case Studies That Emphasize The Complexity Of Broad Core Algorithm Updates
  • How To Remove An Image From Google Search Using The Outdated Content Tool (When The Image Was Published On Another Site)

Web Stories

  • Google’s Disqus Indexing Bug
  • Google’s New Page Experience Signal

Archives

  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018
  • July 2018
  • June 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017
  • November 2017
  • October 2017
  • September 2017
  • August 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • November 2016
  • October 2016
  • August 2016
  • July 2016
  • June 2016
  • May 2016
  • April 2016
  • March 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • March 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • September 2014
  • August 2014
  • July 2014
  • June 2014
  • May 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • December 2013
  • November 2013
  • October 2013
  • September 2013
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • December 2012
  • November 2012
  • October 2012
  • September 2012
  • August 2012
  • July 2012
  • June 2012
  • May 2012
  • April 2012
  • March 2012
  • GSQi Home
  • About Glenn Gabe
  • SEO Services
  • Blog
  • Contact GSQi
Copyright © 2021 G-Squared Interactive LLC. All Rights Reserved. | Privacy Policy

We are using cookies to give you the best experience on our website.

You can find out more about which cookies we are using or switch them off in settings.

The Internet Marketing Driver
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

Strictly Necessary Cookies

Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.

If you disable this cookie, we will not be able to save your preferences. This means that every time you visit this website you will need to enable or disable cookies again.

3rd Party Cookies

This website uses Google Analytics to collect anonymous information such as the number of visitors to the site, and the most popular pages.

Keeping this cookie enabled helps us to improve our website.

This site also uses pixels from Facebook, Twitter, and LinkedIn so we publish content that reaches you on those social networks.

Please enable Strictly Necessary Cookies first so that we can save your preferences!