SSL Certificates

An SSL certificate allows pages on your web site to be accessed via a secure “https://” prefixed URL (for example https://www.yourdomain.co.uk) in addition to the standard non-secure “http://” prefix. You usually find SSL secured URLs when purchasing something online and this is usually accompanied by a “padlock” icon appearing in your browser’s address bar to indicate that sensitive details you enter are being encrypted.

Adding an SSL certificate to your web site helps build trust and portrays a professional image to your customers and site visitors. Customers know that you take their security seriously. It also helps to build confidence and reassures a visitor that making a purchase via your site is safe. In turn helping to boost your overall sales.

Our SSL Certificates start from as low as £89.99/year and also include a dedicated IP address for your web site. In addition, due to us buying in bulk, we are able to offer substantial discounts off our certificates as opposed to purchasing directly via GlobalSign.

There are three different types of SSL certificates. The differences between them come down to how they are applied to the domain(s).

Single Domain SSL Certificates

As the name implies a single-domain SSL certificate can only be used for one domain. It is necessary to understand that ‘domain’ in this case refers to a URL, such as www.yourbusiness.com. A single-domain SSL cannot be applied to subdomains within a domain.

Wildcard SSL Certificates

A wildcard SSL certificate applies to all the subdomains within a domain. For example, a wildcard SSL certificate will apply to learn.yourbusiness.com, accounts.yourbusiness.com, news.yourbusiness.com, etc.

Multi-Domain SSL Certificates (MDC)

With multi-domain SSL certificates (MDCs), multiple true domains can share the same SSL certificate. For example, a multi-domain SSL certificate can cover www.domain1.com, www.domain2.net, www.yourbusiness.com.

There are primarily three types of SSL certificates: Domain Validated (DV), Organization Validated (OV), and Extended Validation (EV). Each varies in the level of validation and verification required. Here’s a more detailed breakdown:

Domain Validated (DV) SSL Certificates

• Ease of Acquisition: DV SSL certificates are the easiest to get, requiring minimal validation. The Certificate Authority (CA) only confirms that the applicant controls the specified domain.
• Cost: These are the most budget-friendly and sometimes even free options (e.g. LetsEncrypt).
• Use Case: DV SSL is often recommended for small businesses and personal websites that do not store sensitive information.

Organization Validated (OV) SSL Certificates

• Validation: OV SSL certificates require more thorough validation procedures. The CA verifies details such as the company’s physical address, contact details, and other relevant information.
• Trust Level: These certificates offer more security and are generally trusted more by users. Some may also display vetted company information.
• Use Case: Typically, OV SSL certificates are used by eCommerce platforms and other websites that handle sensitive customer financial information.

Extended Validation (EV) SSL Certificates

• Extensive Vetting: The most rigorous and comprehensive of the three, EV SSL certificates require in-depth verification of the organization’s legal and physical presence.
• Visual Indicators: Browsers display a green address bar as a visual cue to indicate a website’s high-security level with an EV SSL certificate.
• Use Case: These are most commonly used by financial institutions, government websites, and other organizations where security is paramount.

Both free and paid SSL certificates serve the same fundamental purpose: they encrypt data transmitted between a web server and a client (usually a web browser). However, there are key differences between free and paid SSL certificates that could influence your choice depending on your specific needs. Here’s a breakdown:

Free SSL Certificates (e.g., Let’s Encrypt)

1. Cost: As the name implies, these are free of charge.
2. Validation Level: Free SSL certificates typically only offer Domain Validation (DV), meaning they validate ownership. The entity behind the website isn’t validated.
3. Certificate Lifespan: Generally have a short validity period, often 90 days, requiring frequent renewals. In some cases automatic renewal may not be present, requiring manual renewal.
4. Warranty: Usually offer limited or no warranty for data breaches or other SSL-related failures.
5. Support: Limited customer support, usually community-based or self-service through forums and documentation.
6. Subdomains: Some free providers like Let’s Encrypt offer wildcard certificates that cover subdomains.
7. Ease of Use: Designed to be easy to implement, especially for individuals, small businesses, or projects with no sensitive data.

Paid SSL Certificates (e.g., Alpha SSL)

1. Cost: These certificates come with a price tag, which can vary depending on the provider and the type of certificate.
2. Validation Level: Paid SSL certificates often come in all three flavors: DV, OV (Organization Validation), and EV (Extended Validation), allowing for more thorough vetting and higher trust levels.
3. Certificate Lifespan: These certificates are generally valid for one year, but can be valid for 2 years, or more in some cases. Installation, management, renewal, and support are handled by Storm Internet.
4. Warranty: Usually come with warranties, offering protection in case of certificate failures leading to data breaches.
5. Support: Often offer robust customer support, including direct help via phone or chat.
6. Subdomains: Typically offer a wide range of options including single, multi-domain, and wildcard certificates.
7. Additional Features: May include site seals, daily malware scans, or other security features.

For sites that store and transmit sensitive information, as well as those aiming for PCI compliance, a paid SSL certificate is recommended due to the higher validation and warranty. This includes sites such as eCommerce sites, enterprise websites, and sites that store sensitive user or customer data. However, before making a choice, it’s necessary to check the reputation and compatibility of the Certificate Authority (CA) issuing the certificate since older browsers and systems may not recognise newer CAs.