PRE-SALE FAQS Print

  • 3

 

1. What is SSL?

SSL stands for Secure Sockets Layer, which is a protocol developed by Netscape for transmitting private documents via the Internet in secured way. Secure Sockets Layer (SSL) technology protects your Web site and makes it easy for customers to trust you. SSL creates an encrypted link between a web server and a web browser to ensure that all data transmitted remains private and secure. Millions of consumers recognize the "golden padlock" which appears in their browser to indicate they are viewing a secure web page.An SSL Certificate enables encryption of sensitive information during online transactions. Each SSL Certificate contains unique, authenticated information about the certificate owner. Every SSL Certificate is issued by a Certificate Authority (CA) that verifies the identity of the certificate owner.

2. Why do I need SSL?

There are many reasons why a website needs an SSL certificate. First of all, SSL certificates help websites gain an advantage over their competition by appearing more trusted and more legitimate. Also, these certificates provide assurance to website visitors that their data cannot be tampered with or forged by hackers. SSL certificates also ensure that a customer's sensitive data, like personal information, credit card details, social security number, etc. can be transmitted securely from web browser to server.

3. Why are your prices so low?

We are a strategic partner with many of the industry’s leading Certification Authorities (CAs). We buy SSL certificates in huge quantities, which is why we can offer you wholesale prices. You get exactly the same certificate, same quality, same brand, same satisfaction/technical guarantee, and the same after-sales phone and email support as you would by buying direct, just at much lower prices!

4. How long does it take to issue my SSL Certificate if I place order with you?

We will send you email with SSL enrollment link as soon as you complete your order of any SSL product with us. RapidSSL, RapidSSL Wildcard, and GeoTrust QuickSSL Premium Certificates are issued immediately (within few minutes) once you complete the SSL enrollment process.

GeoTrust True BusinessID Certificates are premium SSL Certificates. All True BusinessID orders are typically processed within 2 - 3 working days, from the time GeoTrust receives your business documents. Depending on your order, it may take more or less time to complete.

5. Is there a limit to the number of certificates I can order?

No, we do not limit the amount of SSL certificates that can be ordered. Go ahead and get as many as you need!

6. What are the accepted modes of payment by our SSL sites?

Currently, we accept payments in US dollars only. We accept the following Credit Cards: Visa, MasterCard, Discover and American Express.

You can also pay via PayPal.

7. What type of customer service do you offer?

We offer  email-, and support ticket- based support to our customers. Our support staff is highly experienced in supporting SSL and webservers and will be happy to help you with any and all technical inquiries.

8. What is your certificate replacement / re-issuance policy?

We offer free replacement / re-issuance for all certificates which are ordered within 7 days from the certificate issue date. To replace a certificate within 7 days of issuance, log into your account and open a support ticket containing the new CSR request along with the Order ID & Invoice Number (Many certificates can be reissued right from your account)

9. With which webserver/mailserver do your SSL Certificates work?

Our certificates work with all major web servers and mail-servers.

Web server software:

  • Apache / Apache2 / ApacheSSL / ModSSL / OpenSSL / SSLEAY
  • Apache + Raven
  • C2Net Stronghold
  • Cobalt Series
  • cPanel / WHM
  • Ensim
  • HSPHERE
  • Helm
  • IBM HTTP
  • IBM Domino Go 4.6.2.6+
  • iPlanet Enterprise Server 4.1
  • Jakarta -Tomcat
  • Lotus Domino 4.6 - 5.x
  • Microsoft Internet Information Server (IIS) 4.x
  • Microsoft Internet Information Server (IIS) 5.x & 6.x
  • Netscape Enterprise 3.51
  • O'Reilly WebSite Professional 2.x
  • Deerfield (O'Reilly) Website Professional 3.x
  • Plesk
  • WebSTAR 4.x - 5.x
  • Zeus Web Server v3

Mail server software:

  • Exchange / Outlook Web Access (OWA)
  • CPPop (cPanel mail server) and other stunnel based mail servers
  • Postfix
  • Courier IMAP

 

10. What do you consider low volume, low transaction?

As a general guide, we consider low volume, low transaction to be when typical customer transaction value is less than 50 USD per week, and volumes of transactions are less than 50 per week. If you have a low volume website and you decide that your customer's confidence is not affected at all by the brand behind the SSL certificate,  we are the solution you need. It is all about customer confidence. While our technology is all production grade, only you can really determine whether your customers’ confidence will improve significantly if you purchase an established brand like GeoTrust, for example.

Note: The 50 per week example figure is simply a commercial guide and not a technical restriction. Technically, our certificates will not be restricted from conducting more transactions than 50 - they are still industry standard 128 / 256 bit SSL certificates. However, it is our opinion that sites conducting more than 50 transactions will require a Professional Level SSL certificate due to the increased likelihood that the website's customers will expect SSL from a highly credible and established provider and well-known internationally accepted SSL brand.

11. What browser versions are compatible with RapidSSL and RapidSSL Wildcard?

Our certificates are compatible with Google Chrome, IE 5.01+, Netscape 4.7+, Mozilla 1+, AOL 5+, Firefox, Safari and many newer Windows- and Mac-based browsers and are single root install certificates (they do not use chaining technology), meaning they are compatible with SSLv2 and SSLv3. Single root certificates are also more widely accepted by web servers because some web servers do not accept chained root technology.

12. Do I need a Dedicated IP Address for SSL?

Yes. To make the SSL certificate work, it requires a Dedicated IP Address.

13. What is browser ubiquity or browser recognition?

Browser ubiquity is the term used in the industry to describe the estimated percentage of Internet users that will inherently trust an SSL certificate. The lower the browser ubiquity, the less people will trust your certificate. If you are operating a commercial site, you require as many people as possible to trust your SSL certificate. As a general rule, any SSL certificate with more than 95% browser ubiquity is acceptable for a commercial site.

Ubiquity is, however, not the only consideration in deciding whether one SSL certificate is better than another. Many companies running high-transaction, high-volume web sites need to maximize customer confidence and therefore buy certificates from well-known, experienced security vendors and mostly use the major players like GeoTrust and Symantec/VeriSign, who are both WebTrust compliant.

If you have a low-volume website and you decide that your customers’ confidence is not affected at all by the brand behind the SSL certificate, then RapidSSL or RapidSSL Wildcard certificates are ideal.

14. What is a Single Root SSL Certificate?

When connecting to a webserver over SSL, the visitor's browser decides whether or not to trust the website's SSL certificate based on which Certification Authority (CA) has issued the actual SSL certificate. To determine this, the browser looks at its list of trusted issuing authorities - represented by a collection of Trusted Root CA certificates added into the browser by the browser vendor (such as Microsoft or Netscape).

Most SSL certificates are issued by CAs who own and use their own Trusted Root CA certificates, such as those issued by GeoTrust and RapidSSL. As GeoTrust and RapidSSL are both known to browser vendors as trusted issuing authorities, their Trusted Root CA certificates have already been added to all popular browsers, and hence are already trusted. These SSL certificates are known as "single root" SSL certificates.

15. What is a Single Root SSL Certificate?

Some Certification Authorities do not have a Trusted Root CA certificate present in browsers, or do not use the root they do own, and use a "chained root" in order for their SSL certificates to be trusted - essentially a CA with a Trusted Root CA certificate issues a "chained" certificate which "inherits" the browser recognition of the Trusted Root CA. These SSL certificates are known as "chained root" SSL certificates. Installation of chained root certificates is more complex and some web servers and applications are not compatible with chained root certificates.

A Certification Authority that has and uses its own Trusted Root CA certificate already present in browsers is a clear sign that they are an experienced, stable, and credible organization that has a long term relationship with the browser vendors (such as Microsoft and Netscape) for the inclusion of their Trusted Root CA certificates. For this reason, such CAs are seen as being considerably more credible and stable than chained root certificate providers who do not have a direct relationship with the browser vendors, or do not use their own root certificates to issue SSL certificates.

You can view the Certification Authorities who have and use their own root certificates by viewing the list in your browser. Chained root certificates require additional effort to install, as the webserver must also have the chained root installed. This is not necessary for single root certificates.

16. Why is stability important for SSL certificates?

All SSL certificates issued by our vendors are issued from a trusted CA root certificate that is owned by the vendor. This means that all of our certificates are stable.

17. What is an SSL Warranty?

Our customers are of the utmost importance to us, which is why we only offer trusted SSL Certificates that include a warranty just in case the certificate was issued incorrectly, meaning issued to a third-party site that did not properly get verified and caused the end-user harm.  Our warranties start at $10,000 and go all the way to $1,500,000. You can see the specific warranty information on every product page.

Warranties protect the end-user by guaranteeing that the SSL certificate was issued to the appropriate party. Warranties are important when considering an SSL certificate purchase; it means that the issuing vendor is standing behind their certificate and its validation methods. Be wary of any certificate that does not offer some kind of warranty.

We strongly recommend only purchasing SSL Certificates from reputable Certificate Authorities (CA); such as, Symantec, RapidSSL, GeoTrust, Thawte, Trustwave or Comodo.

18. I may need to change my IP address for my webserver, does this matter?

An SSL Certificate is issued to a domain name and not an IP address. So, as long as your webserver is hosting the domain name for which your SSL certificate has been issued, the IP address doesn't matter.

19. My webserver hosts many sites on a single IP address; can I install a certificate for each domain name?

The SSL protocol encrypts the domain name when an SSL session is being established. If you are hosting many websites each with their own SSL certificate on the same webserver, each website must have a unique IP to ensure that the webserver knows which domain the SSL session should be for. If you only host a single domain, then you can use name-based hosting. However, if you host multiple domains on the same server then you must use IP-based hosting. Please note that host headers on Microsoft IIS will cause SSL errors if you install multiple SSL certificates for multiple domains on a single IP address.


 
 

Was this answer helpful?

« Back