TLS Certificates by Lux Scientiae create a secure connection between your website and its visitors. This allows you to securely collect information from visitors, display secure/sensitive information, and enable visitors to verify the site they are connecting to. TLS Certificates are needed for secure web hosting, private labeling with a secure domain, and secure email services on a dedicated server. They secure Internet traffic, as SSL v2 and SSL v3 are no longer used. Lux Scientiae offers two options for using a TLS Certificate: having Lux Scientiae buy the certificate for you or purchasing the certificate yourself. For the quickest setup and renewal, Lux Scientiae recommends having them purchase your TLS certificate. They handle the purchase from their partner Sectigo, gather necessary information, and ensure the certificate does not expire by tracking and coordinating renewals. The certificate will use 2048-bit keys, support 128-bit and 256-bit encryption, have the highest degree of browser compatibility, and be trusted by end users as it will be issued by Sectigo. You will need to provide contact information and respond to a TLS-certificate confirmation email from Sectigo. Lux Scientiae will handle everything else. If you would like to purchase your own certificate or generate a self-signed one, Lux Scientiae will generate a certificate signing request (CSR) for you. You will order your certificate from a third party and provide the signed certificate file and any necessary intermediate certificates. You are responsible for renewing your certificate before it expires. You may need multiple TLS certificates for different domain names. You will need one TLS certificate for each secure website hosted, either for domain.com and www.domain.com, or a subdomain like secure.domain.com. If you have Private Labeled WebMail and want to brand the domain name for TLS connections, you will need a TLS certificate for that secure private labeled domain name. Note that you can use the same secure private labeled domain name for multiple private labeled themes, WebMail TLS branding, SecureLine TM, SecureSend portal TLS branding, SecureLine TM Escrow TLS branding, and SecureForm post URL TLS branding. There is no need for separate domains and certificates for these services.