A SSL certificate is required for all SSL transactions.
SSL allows for authentication and encryption for website connections.
There are two types of certificates:
- Self signed: generated by applications
- CA signed: generated and signed by CAs (Certificate authorities)

Self signed certificates are often used in testing environments whereas CA 
signed ones are what you should use in production. (may cost cashinga)