SSL Alone

[linuxse]

SSL is not a guarantee of complete safety. Despite the fact that SSL is an encryption protocol, a security measure designed to hide and protect the traffic between the user and the web server, it cannot serve as a guarantor of security. ... When traffic is encrypted via SSH, firewall or router

There is many more things to think about when it comes to security.

1: Age of the company, and Domain... Clearly if a domain is a few weeks or months old then maybe you should be careful. You can check domain age here https://websiteseochecker.com/domain-age-checker/
2: Search Google for information on the company in question.
3: Check the site has a Referrer-Policy, Feature-Policy, Content-Security-Policy, X-Contenet-Type-Options, X-Frame-Options and Strict-Transport-Security Headers:

You can check your site here https://securityheaders.com

*snipped*

 

[izumi777]

I agree. I've seen some phishing websites using free or paid ssl committing a Binance phishing campaign.

 

[easyhostmedia]

You will find all phishing websites (pertaining to be Nike etc.) would never purchase an SSL cert which was a clear red flag if you came across one of these sites, but now with free SSL certs these fraudsters are using these, so you will see the padlock and think the site is secure/trustworthy and safe.

 

[easyhostmedia]

if a domain is a few weeks or months old then maybe you should be careful.

This means nothing as every WebHost has to start somewhere