Every site should be served over https, with a padlock in the browser. Certificates are issued and renewed automatically — there is nothing to buy and nothing to install.
Checking a site
Open the site and look at the Security card.
My Hosting → Domains shows the same thing for every domain at once.
If a domain shows no certificate
Usually it is simply too soon. A certificate can only be issued once the domain is actually pointing at us, so a newly changed domain may show nothing for a short while. It resolves itself.
Staging copies often show no certificate, which is expected — they are temporary and not meant for visitors.
If a domain has been pointing at us for some time and still has no certificate, tell us and we will look.
Renewal
Automatic. Certificates renew well before they expire and you will not hear about it.
