Best SSL Certificate to Use
-
I am setting up an ecommerce website that will sell batteries and like most e-commerce sites we will be taking credit cards. I was exploring the different SSL certificates and providers and I was shocked at the difference in pricing. Anywhere from free to over $1000! What is really necessary and what is nice to have? Any suggestions on SSL providers?
Thanks
-
There's several different kids of SSL but it sounds like you're talking about a single domain. That narrows things down to the two most common kinds: domain validated and extended validation.
Domain validation is the most common kind of certificate. The certification authority will send an email to the administrative contact listed on the WHOIS of the domain. Typically it's a link and you click it and that's all that's involved. These are relatively inexpensive but only work for one domain or subdomain (i.e. the certiciate will be issued for www.domain.com but won't show as valid for domain.com). In this same vein, but more expensive, is the wildcard certificate, which works for all subdomains (*.domain.com).
Extended Validation is only available for corporations and you have to jump through a LOT of hoops to get one (birth certificate of one of your officers, letter of validity from your lawyer or accountant, etc.). They take some time to get but the advantage is that you get the coveted green bar (see PayPal's site for a good example).
It doesn't matter who issues the certificate. Verisign used to be a huge name in this area but not so much in recent years. You'll pay more for their name and "warranty", but I doubt anyone outside the industry itself could tell you who Verisign is, let alone what the difference is. I have two Godaddy certificates and it hasn't slowed us down one bit. Many people simply resell for another authority (i.e. GeoTrust, Comodo, etc)
The encryption itself doesn't differ between certificates. Your Private Key (the piece your server needs to decrypt the traffic) and Certificate Signing Request(CSR) will have to be at least 2048 bits in strength (industry-wide). The actual encryption between your server and your client's browser is something that is negotiated as part of the "handshake" when the connection is first made and is most likely 128 bits (although some browsers and servers can support 256 bits). One thing you will need to note is the difference between SHA1 and SHA2 (Godaddy directly asks you which you want and I'm sure the others do as well). When you look at a certificate's details in your browser you'll see who issued a certificate. If it says G2, they're using SHA2. SHA1 has some weaknesses and is being phased out. The only people who will notice the difference are people running Windows XP SP2 or earlier (running any browser, even Chrome or Firefox) and they'll get an invalid certificate warning.
Be sure that your host has plugged the Heartbleed bug or you'll expose your private keys (anyone with your private key can decrypt your traffic).
-
Most SSL providers provide the same exact service. The difference in cost is from the levels of insurance, brand name and provider of the SSL, and trust factor of the badge. For example, you can buy a SSL from GoDaddy right now for around $70. As far as I can see it offers no insurance against identity or infomation theft. If you want a SSL from Verisign, its around $1000 and offers a $1,250,000 warranty. Most people know the verisign badge, and trust that their information will be encrypted and secure. When you purchase an SSL from them, you also get daily malware scanning and other features.
It really boils down to what are you getting the SSL for, if you require the additional insurance, what other features you would like to have, and if you think the badge will be the deciding factor of conversion for your users. If I remember correctly, the more expensive SSL's use a different bit rate. For example 128 bit vs 256 bit.
Hope this helps!
-
Hello Jimmy, I hope this answers you. There are a lot of SSL Certificate offers that I have seen so far and as a Marketer and a developer, I have implemented a lot of SSL Certificates. I will highly recommend you start with a Minimal SSL Certificate either from RapidSSL, GeoTrust or Comodo since they are cost effective.
I just ordered an SSL Certificate from Iwebhub. Check them out too.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Index Page Redirect to Home Page? Best Practices...
Hi, I am wondering what the best practice is when a site has an index page and a home page? I have two pages, listed below, and want to know if I should 301 redirect my "index" page to my standard home page. The home page is where I would like all traffic to fall on for our website. Additionally, I used the rel=canonical tag years ago on the index page to indicate that the home page is the main content. Home Page - https://www.1099pro.com/ (PA 45) Home Page Canonical: rel="canonical" href="https://www.1099pro.com/"/> Index Page - https://www.1099pro.com/index.asp (PA - 33) Index Page Canonical: rel="canonical" href="https://www.1099pro.com/"/> It seems to me that there is some extra juice that could be passed to my home page (which is the page that ranks highly for our major keywords) by 301 redirecting the index page. Is there any reason why I should not do that? Really appreciate any help - especially with extra explanations - for the simple minded like me ;)! -Michael
Web Design | | Stew2220 -
Best practice for multilanguage website ( PHP feature based on Browser or Geolocalisation)
Hi Moz Experts I would like to know what does it the best practice for multilanguage website for the default language ? There are several PHP features to help users to get the right language when they come from SEO and direct; present the default language by browser language, by gelolocalisation, etc. However, which one is the most appropriate for Quebec company that try to get outside Canada ? PRO and CONS. Thank you in advance.
Web Design | | johncurlee0 -
Best strategy for multiple internal links
We have a website that has a whole heap of internal links. After re-structuring the footer links to the main categories we are now looking at the best way to display the internal links from each category (approx 20-50 links from each). At present they are simply listed on the corresponding category page, however this doesnt look great so we want to display them in a way that is user friendly and also seo friendly. Any suggestions and examples appreciated. Thanks in advance.
Web Design | | Silkstream0 -
Best layout pages for SEO
Dear all, what would be the ideal layout of a webpage for SEO? How would a homepage and landingspage look like? Thanks in advance! Best regards, Ben
Web Design | | HMK-NL0 -
Best Way to Re-Direct traffic from existing site to new site?
Good Morning, I have an existing site (http://goo.gl/QKkpi) running on a slow server. We decided to create a new site (http://goo.gl/XUH3f) with the intention of de-commissioning the first one. Both sites are on the same WMT account. What is the best way to permanently redirect any backlinks/traffic (all levels, from home page to product pages) from the old site to the new site (prior to shutting down the first one). Thanks a lot!
Web Design | | Prime850 -
Best E-commerce Solution - SEO Friendly
I need to know thoughts on the best ecommerce solution for our company. We currently have one website with our products, that people call and they purchase over the phone. In the future we are considering adding a different product line, to which we want to be a fully functional online ecommerce site. We eventually are considering having only a portion of our products on our current site to have the ability to purchase online. The reasoning is because we sell very high quality products that range from $1000 - $200,000. We would like to have a consumer section and an industrial sectioin. The consumer section would consist of products from $1000 - $10,000 or so. Then the industrial products you would need to call to purchase. So would it make sense to have a main website that is our corporate site with links to different websites? Or to keep this all in one website and have different directories like so: corporatecompany.com - links to product-line.com corporatecompany.com - links to product-line-two.com or corporatecompany.com/consumer-grade/ corporatecompany.com/industrial-grade/ corporatecompany.com/the-ecommerce-only-section/ Can a shopping cart be used to turn on half of the products for purchasing online, and the other half to be call in only ? What is the best e-commerce solution that is SEO friendly and also can just play a role of a regular website?
Web Design | | hfranz0 -
Websites using Flash?
Can you optimise websites using flash? is it exactly the same aspects to optimise or does it cause problems??
Web Design | | wazza19850 -
Which CMS Should Use?
I have a desinger working on a new webiste and he's suggesting that WP creates design limitations (He's doing quite a bit of HTML 5 I believe...I'm not sure) and obviosly has secruity concerns. He suggested TextPattern, which I've never heard of. Has anyone had any experience with it? Also, what CMS are you using (besides WP) that you really like and is SEO friendly? Thanks
Web Design | | LuminConsutling0