The complete guide to choosing the right one

Last modified August 17, 2021

If you are looking for the right SSL certificate for your website owner or for your customers, here you will find information about SSL and TLS certificates and how to choose your certificate provider.

What are SSL and TLS certificates?

SSL stands for Secure Sockets Layer. SSL certificates are used to secure communications between a website, web host or server and connecting visitors (or between two computers in a client-server relationship). An SSL certificate verifies the identity of the domain name (for example digitiz.fr) which operates the site and allows the encryption of all information between the server and the visitor in order to guarantee the integrity and security of the transmitted information.

As for the term TLS (Transport Layer Security), it is in fact the new, more secure version of SSL. However, the term SSL is used much more when talking about security certificates.

Why use an SSL certificate

Identity theft and browser warnings are a growing concern among web users. If you do not choose the right SSL certificate for your website, you risk compromising the trust of your visitors and increasing the bounce rate. This can therefore negatively impact sales for an e-commerce site, the number of prospects or customers.

For example, if you receive payments over the Internet, or if users enter confidential information on your website, the communication must be encrypted using an SSL certificate. Without the latter, there is a risk that unauthorized third parties may view the information entered.

In addition to encrypting information, an SSL certificate aims to show visitors to your website that your company really exists and that the website really belongs to it. SSL certificates are only issued after an authentication process, which verifies that your business can use the domain. Finally, it is also verified that your company accepts that the certificate is sent to the requester.

An SSL certificate thus creates the necessary trust for users for two reasons:

• no third party can read the information they have entered
• your business exists as such.

The user can see if a page is SSL secure or not using different characteristics. With SSL, the URL starts with HTTPS instead of HTTP in the address field, and you may also see a padlock depending on your browser.

Free SSL certificates

Some certification authorities like Let’s Encrypt offer free SSL certificates which are sometimes included in hosting offers (for example at OVH). However, you should be aware of the trade-off when opting for a free SLL certificate:

• Security: Free SSL certificates provide sites with limited encryption because you can only get free DV certificates.
• Responsibility: If encryption fails and a visitor suffers harm, a free certificate offers no liability protection.
• The validity period: Free certificates may have a shorter validity period (often 90 days) and therefore you must renew your certificate regularly.
• The support: You will not receive assistance with authenticating your certificate.

A free SSL certificate can, however, be perfectly suitable, if for example you have a local website or if you just have a blog. But as your business grows, you’ll need additional protection.

The different types of certificates

Domain Validated (DV) SSL Certificates

DV certificates are best suited to small and medium-sized businesses looking for cost-effective security without having to earn the trust of site visitors. All that is required to issue a DV certificate is proof of ownership of the associated domain name, which is provided through a simple email validation process. These certificates can be issued in minutes, they activate the HTTPS protocol and display a clear message like the padlock symbol in Internet browsers.

However, DV certificates do not verify the legitimacy of the organization that the website represents, and therefore should not be used for e-commerce sites or sites that handle confidential information. However, they are a great option for many internal sites, test servers, and test domains.

SSL Organization Validation (OV) certificates

OV certificates offer the same protection as DV certificates, but they go a little further than just proving domain ownership. The issuing certification body uses an OV certificate to confirm that the business linked to the domain name is registered and legitimate by verifying details such as the business name, location, address, and establishment information or recording. This makes the OV certificate a more suitable option for publicly accessible websites that represent businesses or organizations.

Extended Validation (EV) SSL certificates

EV certificates provide the highest level of trust by assuring consumers that they are dealing with a trusted website. This is why these certificates have become the standard for online stores. For highly secure browsers, EV SSL certificates trigger a green address bar with the name of the company or organization to which the domain belongs.

Site identity verification and organization validation includes a rigorous verification process. EV-SSL certificates are essential for large businesses or e-commerce sites because they build credibility by showing savvy consumers that a potential transaction is being made with a legitimate recipient and that the website takes privacy seriously. data from its customers.

Which SSL certificate provider to choose

1. Comodo / Sectigo

SSL certificates from Comodo and Sectigo (which are the same group) have been available for a long time and are considered one of the best SSL certificate providers on the market. The group is trusted by millions of businesses around the world and is suitable for all types of businesses. The certificates provided are accepted by all browsers thanks to its 256-bit encryption. It will effectively meet security requirements.

2. DigiCert

Used by many large companies, DigiCert offers a large number of choices of OV and EV certificates. Its products range from standard certificates to truly advanced solutions like ECC cryptography. The offering is rounded off by excellent support and the prestigious Norton Trust Seal. DigiCert is a solid provider for enterprise sites.

3. GlobalSign

GlobalSign is one of the most used authorities by large companies. Its single domain certificates have the nice feature of protecting subdomains, which can be useful. If you need many licenses, the pricing model, which offers up to 80% off bulk purchases, makes it much more attractive.

4. GeoTrust

GeoTrust is a subsidiary of DigiCert but one of the best SSL certificate providers in its own right. It offers a standard feature offering, backed by excellent support and fair pricing. GeoTrust really excels at selling certificates in bulk, so you can get big discounts by purchasing a large number of SSL certificates as a reseller.

5. Entrust Datacard

Entrust Datacard provides unique SSL certificates with different options available. While this provider is not the cheapest on the market, the company has a solid reputation for efficiency and ease of use. It also offers a number of other services, such as software or electronic passports.

Similar articles