The certificate that encrypts traffic between browser and server and turns the address bar from a warning into a padlock.
Without it browsers mark the site as not secure, search ranks it lower, and no payment provider will work with it. It is a baseline, not a feature.
We set up certificates with automatic renewal, because the common failure is not a missing certificate but an expired one on a quiet weekend.