How, Why, What
SSL/TLS Certificates – All your questions answered, we are ready to chat if anything is unclear
How do SSL/TLS Certificates work?
SSL/TLS certificates are an essential component of the data encryption process that make internet transactions secure. They are digital passports that provide authentication to protect the confidentiality and integrity of website communication with browsers.
The process below explains how the encryption works:
Why you should consider using SSL/TLS certificates
Securing your website not only ensures that visitors and clients are safe online, it also improves your sites Search Engine Optimization (SEO) and Google rankings as well as adds trust to your brand and identity.
Implementing SSL/TLS, will mean your site can maximise on the following business benefits:
ENCRYPT SENSITIVE DATA
Activate HTTPS & LOCK ICON
ADHERE TO COMPLIANCE STANDARDS
PROVE LEGITIMACY
STRENGTHEN BRAND IDENTITY
INCREASE SEO RANKING
Like what you see?
View our plans from individual to enterprise certificate management solutions. Find what fits you or contact us if you need something special!
What type of SSL/TLS certificates are available?
Although all provide the same level of encryption, identity will always serve as the foundation to digital security. High-assurance certificates provide additional layers of identity assurance elevating the trustworthiness of your entire site.
Here’s how the different types of certificates compare:
Domain Validated (DV) SSL/TLS
CERTIFICATE FEATURES
Certificates are issued quickly, typically through an automated process.
Domain Validated (DV) SSL/TLS
The DV DILEMMA
DV certificates provide NO identity assurance. No identifying information will be visible in the certificate organisation name field.
- Can be acquired anonymously, and used for phishing sites
- Sites using DV certificates are generally linked to fraudulent activity
Domain Validated (DV) SSL/TLS
WHAT IS VERIFIED?
Domain ownership/control is validated against the information contained on the domains public WHOIS records.
Domain Validated (DV) SSL/TLS
WHEN TO USE:
Because this type of certificate provides no assurance, we don’t advise that it is used in any application.
It is NOT recommended for e-commerce or sites that handle sensitive data such as lead generation forms and online login pages.
Organisational Validated (OV) SSL/TLS
CERTIFICATE FEATURES
OV certificates provide high assurance and verified site identity. Extensive validation checks are performed before certificates are issued.
Organisational Validated (OV) SSL/TLS
THE OV ADVANTAGE
Registered organisation information is displayed within the certificate details, users can view this information by clicking on the padlock icon to view the certificate attributes.
Organisational Validated (OV) SSL/TLS
WHAT IS VERIFIED?
Domain Ownership/ Control
Various domain verification options are available for quicker approval and issuance including:
- Email Authentication
- Web Server Authentication
- DNS Authentication
- Manual Authentication
Organisation Verification
Additional Information about the organisation which controls the site (registered/ legal name, location etc).
Certificate Requester Validation
Additional steps are taken to contact the requesting organisation to confirm that they requested the certificate and that the requester is authorised to receive the certificate on behalf of the organisation.
Organisational Validated (OV) SSL/TLS
WHEN TO USE:
SSS highly recommends the use of OV certificates. OV are considered best practice for securing website transactions and are backed by rigorous verification practices and checks. This certificate type proves website authenticity, assuring visitors that you are serious about the protection of their information.
Organisational Validated (OV) SSL/TLS
CERTIFICATE FEATURES
OV certificates provide high assurance and verified site identity. Extensive validation checks are performed before certificates are issued.
Organisational Validated (OV) SSL/TLS
THE OV ADVANTAGE
Registered organisation information is displayed within the certificate details, users can view this information by clicking on the padlock icon to view the certificate attributes.
Organisational Validated (OV) SSL/TLS
WHAT IS VERIFIED?
Domain Ownership/ Control
Various domain verification options are available for quicker approval and issuance including:
- Email Authentication
- Web Server Authentication
- DNS Authentication
- Manual Authentication
Organisation Verification
Additional Information about the organisation which controls the site (registered/ legal name, location etc).
Certificate Requester Validation
Additional steps are taken to contact the requesting organisation to confirm that they requested the certificate and that the requester is authorised to receive the certificate on behalf of the organisation.
Organisational Validated (OV) SSL/TLS
WHEN TO USE:
SSS highly recommends the use of OV certificates. OV are considered best practice for securing website transactions and are backed by rigorous verification practices and checks. This certificate type proves website authenticity, assuring visitors that you are serious about the protection of their information.
Extended Validated (EV) SSL/TLS
CERTIFICATE FEATURES
EV certificates provide the highest assurance online, backed by the strongest level of verified identity which adds additional layers of security to your site.
EV is used by major anti-phishing services to determine safe websites, and is treated as more trustworthy by browser filters.
Extended Validated (EV) SSL/TLS
THE EV ADVANTAGE
Organisations that implement EV are well positioned for forthcoming regulations in the EU that put identity at the forefront of digital security. Regulations for PSD2 compliance will require financial service providers to secure transactions and open banking APIs with a Qualified Website Certificate (QWAC), which is built upon the foundation of an EV certificate.
EV certificates follow a very similar validation process to OV but include a few additional checks adding to the level of trust and security the certificate provides.
Extended Validated (EV) SSL/TLS
WHAT IS VERIFIED?
Domain Ownership/ Control
Various domain verification options are available for quicker approval and issuance including:
- Email Authentication
- Web Server Authentication
- DNS Authentication
- Manual Authentication
Organisation Verification
Additional Information about the organisation which controls the site (registered/ legal name, location etc).
Identifying detail
Extensive identifying details are verified which includes (legal status, physical and operational existence, contract signer authority, high authority details etc.) All information is checked using third-party sources to confirm the sites legitimacy.
Extended Validated (EV) SSL/TLS
WHEN TO USE:
EV certificates are the most trusted and secure SSL/TLS solution that is actively used by the worlds leading online businesses. The most extensive validation method is used to verify the sites identity providing high assurance as well as data encryption for your organisations networks, websites and domains.
If you take security and your customers information seriously and are thinking of using an EV SSL/TLS certificate, but assume the validation process is too complicated or long, let SSS do the work for you. Our team of experts are ready to streamline the process, helping you easily acquire EV without the hassle.