A piece that comes from another site

A foreign window embedded in your page can break the lock.

If you do not need it, do not embed it. If you do, see that the piece is https too.

What it is for The certificate closes the path between you and the visitor. It does not store the card number with you. The payment page is separate.

How it sits A certificate has an end date too. When it ends, the lock drops and the page warns. Renewal sits inside the hosting account.

Where it breaks A piece that comes from another site. A certificate works for the domain it was written for. It does not clip onto another name. A subdomain must be named on the certificate too.

What to do A certificate binds to the domain it was written for. Payment ends on the Stripe page. The card number does not sit on this site.