So, let\u2019s talk about SSL Certificates.<\/p>\n
![\"Types](\"https:\/\/www.sslrenewals.com\/blog\/wp-content\/uploads\/2017\/03\/types-of-ssl.jpg\" "\\"types-of-ssl-certificates\\"")
<\/p>\n
Validation Levels<\/h3>\n
Let\u2019s start with something basic: all SSL certificates offer the same industry-standard level of encryption. A free SSL certificate and a $3,000 SSL certificate both provide the same level of connection security.<\/p>\n
So why the heck would you pay three grand for one?<\/p>\n
Well, that\u2019s because SSL performs two functions. The first, better-known function is encryption. It secures connections via encryption. The second, the lesser heralded function is authentication. SSL can provide definitive proof of identity, which is something that is becoming increasingly important as phishing and cybercrime are becoming more rampant than ever.<\/p>\n
There are three different validation levels; each has its own\u00a0strengths and weaknesses.<\/p>\n
- \n
- Domain Validation (DV)<\/strong> \u2013 The vast majority of SSL certificates are Domain Validation<\/a>. That\u2019s because it\u2019s the easiest type to get. All you need to do to get a DV certificate is prove ownership over a domain. DV can be issued within minutes. It\u2019s a great choice for small personal websites and blogs that just need simple encryption, but businesses should invest in business authentication\u2014not DV.<\/li>\n
- Organization Validation (OV)<\/strong> \u2013 OV SSL was the original type of SSL certificate. DV was created to expand access to encryption and EV was created to offer a greater degree of authentication. But OV was the original. Organization Validation<\/a> requires a company or organization to undergo light business vetting, in return verified business details are included on the certificate and can be viewed by anyone who knows how to find them. The problem with OV is that it displays the same visual indicators as DV and most users don\u2019t know how to find the verified business details.<\/li>\n
- Extended Validation (EV<\/strong>) \u2013 Extended Validation offers the highest level of authentication, a company or organization must undergo extensive vetting (don\u2019t worry, this isn\u2019t as intensive as it sounds if your business has up to date registration information on hand), but in exchange EV SSL<\/strong><\/a> grants a unique visual indicator: Business Name in URL. This offers unimpugnable proof of identity by placing your business\u2019 verified name and country of origin next to the URL in the address bar. The only drawback to EV SSL is the price, but research shows that EV boosts traffic and conversions and eventually pays for itself\u2014so it\u2019s really more of an investment.<\/li>\n<\/ul>\n
Now that we\u2019ve covered the validation levels let\u2019s get into specific types of SSL certificate.<\/a><\/p>\n
![\"type](\"https:\/\/sslrenewals.com\/blog\/wp-content\/uploads\/2017\/03\/types-of-ssl-certificate.jpg\")
type of ssl certificate<\/figcaption><\/figure>\n Multi-Domain\/SAN SSL<\/h3>\n
One of the most common issues that companies and organizations run into with SSL is the cost and administrative burden of purchasing SSL certificates to cover all their different domains. Fortunately, in addition to single domain SSL certificates, there exist a range of options to help encrypt multiples sites, sub-domains, etc.<\/p>\n
We\u2019ll start with Multi-Domain\/SAN certificates<\/a>. As the name implies, these certificates are capable of encrypting multiple domains at once. The maximum number of domains that you can encrypt on a single certificate varies by Certificate Authority (CA), it\u2019s 25 for Thawte, 100 for GeoTrust and Symantec and 250 for Comodo.<\/p>\n
Here\u2019s how it works, when you purchase an SSL certificate you are required to generate a Certificate Signing Request (CSR) that contains all the information needed to create the SSL certificate. Typically, you would list the name of the domain you want to encrypt in the Fully Qualified Domain Name (FQDN) field. And that\u2019s true with Multi-Domain SSL too, but in this case, you\u2019ll also include the full domain name of every additional domain you want to cover in the Subject Alternative Name (SAN) fields. When the CA issues the certificate, it can be installed on all of the listed domains.<\/p>\n
Most Multi-Domain SSL certificates come bundled with 2-4 SANs; additional SANs must be purchased as needed.<\/p>\n
Wildcard SSL<\/h3>\n
So, you can encrypt multiple domains with a single SSL certificate, but what about sub-domains? What if you only own a single domain, do you need to buy SANs to encrypt a bunch of sub-domains? No! There\u2019s a specialized type of SSL certificate for sub-domains.<\/p>\n
It\u2019s called a Wildcard.<\/p>\n
Wildcard SSL<\/a> is an incredibly versatile certificate type, it can encrypt an unlimited number of sub-domains on a single certificate. Seriously, as many as you have. And you don\u2019t pay per the sub-domain as you would with Multi-Domain, you just buy a single Wildcard and it covers everything. Best of all, you can even add sub-domains after you purchase the Wildcard and as long as you re-issue the certificate it will protect the new sub-domains too.<\/p>\n
Here\u2019s how it works, during the CSR generation process you use an asterisk in place of the sub-domain level you\u2019re looking to encrypt (i.e., *.domain.com). Once the Wildcard is issued all the sub-domains at that level will be encrypted.<\/p>\n
A couple of things to keep in mind, you WILL need multiple Wildcards if you want to encrypt sub-domains at different domain levels. Also, Wildcard SSL is not available in EV, so if you want a business authenticated Wildcard solution, you\u2019ll have to settle for OV.<\/p>\n
Multi-Domain Wildcard SSL<\/h3>\n
And finally, we have the Multi-Domain Wildcard SSL certificate<\/a>. As the name suggests, this is a jack-of-all-trades certificate type that functions as both a Wildcard and a Multi-Domain certificate.<\/p>\n
The way it works is with the use of the Wildcard SAN. Rather than functioning as a traditional SAN field, you also have the option to enter a domain with an asterisk in place of the sub-domain level you want to encrypt. Multi-Domain Wildcards can encrypt up to 25, 100 or even 250 domains and an unlimited number of sub-domains at the same time.<\/p>\n
\nFind an SSL certificate that best aligns with your security needs<\/h2>\n
Start here to choose the right kind of SSL certificate and keep your business secure.<\/p>\n
Explore the choices<\/a><\/p>\n<\/div>\n
Wrapping Up<\/h3>\n
And there you have it, that\u2019s a quick run-down on the different types of SSL certificate. SSL is an extremely important<\/a> product, not just for securing your website but also for building trust with your customers.<\/p>\n
Hopefully, this guide helps you decide what kind of SSL certificate is best for you.<\/p>\n\n\n
Related Post:<\/strong><\/p>\n\n\n\n
- Organization Validation (OV)<\/strong> \u2013 OV SSL was the original type of SSL certificate. DV was created to expand access to encryption and EV was created to offer a greater degree of authentication. But OV was the original. Organization Validation<\/a> requires a company or organization to undergo light business vetting, in return verified business details are included on the certificate and can be viewed by anyone who knows how to find them. The problem with OV is that it displays the same visual indicators as DV and most users don\u2019t know how to find the verified business details.<\/li>\n