When a visitor connects to your site via HTTPS, their browser validates your SSL certificate. If valid, the browser displays a padlock icon next to the URL address bar and uses the https:// prefix. If there is an issue (expired cert or mixed content), the browser will display a "Not Secure" warning.