Types of SSL Certificates

Choosing the best type of SSL for your website can be a minefield, especially if you’re not exactly sure what an SSL certificate does, let alone the differences between each type. If you’re not especially tech-savvy, this can add to the ordeal if you don’t know what any of the jargon means. If you want to find out about the different SSL certificate types in plain English, you’ve come to the right place.

Before we get into the ins and outs of the different types, here’s a quick primer on what an SSL certificate is and why your site should have one. (If you’re already well aware, click here to skip to the good stuff!)

SSL is short for Security Sockets Layer. SSL is a type of technology that encrypts (renders unreadable) data that is transferred between users and a website. It ensures that malicious third parties can’t intercept your personal information. An SSL certificate is a type of digital certificate displayed in the address bar of your website that informs users that your website has SSL enabled.

Why SSL certificates are important

Apart from the obvious answer that protecting the personal data of your users and customers should be a top priority, the fact of the matter is: Internet users are becoming more security conscious (as they well should be). An SSL certificate is a visual indicator that your website is one Internet users can trust and that they need not worry about their personal information being hijacked for malicious purposes if they use it. This is especially important if your site features facilities for:

Logins
Forms that capture personal data
Credit card transactions

If you want to earn and maintain the confidence of your site’s users and/or customers, an SSL certificate is an essential assurance that the data they give you is protected.

Furthermore, having an SSL certificate on your site will also positively impact your Google ranking and accessibility on major web browsers. Since calling for “https Everywhere” on the web in 2014, Google’s search engine algorithm gives higher rankings to sites that are secured with SSL. In addition, if your site doesn’t have an SSL certificate, major browsers, including Google Chrome, warn users that the site is insecure and will not let them access it.

Ways users identify a secure website

A website with SSL enabled can be recognized in multiple ways in the address bar. First off, it will have the “https” protocol prefix at the beginning of the web address. There may also be a padlock or a tune symbol present which can be clicked on to reveal certain information about the site and the individual or organization running it.

Many certificate authorities (entities that grant SSL certificates) will also give enterprises a site seal to display somewhere on their website. Namecheap’s site seal is located in the footer of each page and looks like this:

This site seal indicates that all transactions made on Namecheap.com are securely encrypted.

A site seal is a good way of visually informing your website users and customers that your site can be trusted, especially if they’re not savvy enough to look for the “https” in the address bar.

By now we’ve probably convinced you of the importance of getting an SSL certificate for your website. (If you need more convincing, read our articles on what SSL is and why your site needs SSL.) But with so many types to choose from, how do you know which is the correct one for you?

Read on to learn more about the different kinds of SSL certificates.

The different types of security certificates

Before we go any further, it’s time to reveal something about SSL certificates that might just blow your mind: all SSL certificates have the same level of encryption – it’s the level of validation that sets them apart.

Validation level refers to the extent of checks that a Certificate Authority does to verify the identity of a person or organization that owns a website. But what exactly is a certificate authority (CA) and what gives them the authority to do this?

A CA is a third-party organization that is trusted by the CA membership programs of different electronic devices, operating systems, and browsers. A CA must adhere to the criteria of each membership program to become a trusted authority. Commonly used CAs include Comodo (now Sectigo, which signs the SSL certificates offered by Namecheap), GlobalSign, and DigiCert.

The extent of checks a CA runs to verify you or your organization is dependent on the kind of website you have and the level of validation it requires.

Types of SSL validation

The type of validation you decide to go for will be dependent on the size and scope of your website, as well as the kind of data you will be requesting from your users and/or customers. The three main types of SSL validation are:

Domain validated certificates (DV SSL)
Organization validated certificates (OV SSL)
Extended validated certificates (EV SSL)

Let’s take a look at how each type is validated, how you can recognize it in your web browser, and each of their pros and cons.

DV SSL

How it’s validated: DV SSL certificates have the lowest level of validation of the three. When issuing DV certs, CAs do not look into information about the identity of a person or company running a website. They simply verify that they have control over the domain that they are looking to get SSL certified.
What it looks like: The web address will feature “https” and the padlock symbol. When you click on the padlock or a tune icon to view the certificate, the information about website ownership will be limited.
Pros: DV SSL certs are issued more quickly than the other options due to the less rigorous verification process, which is generally online and automated. Most of the time it is issued on the same day, often in a few minutes. It is the cheapest option of the three, with some CAs offering them for free. This makes it ideal for smaller websites and blogs.
Cons: As we mentioned before, while the encryption level of a DV SSL is just as effective as the other two, the low level of validation means that website users don’t have much of an idea of who a domain owner actually is. This can impact your site’s trustworthiness and makes it a less than ideal option if you’re running an online store or any kind of site that requires users hand over sensitive information.

OV SSL

How it’s validated: The background checks and verification process are more intensive for OV SSL certificates. CAs verify the individual or business that own the domain and do some minor vetting.
What it looks like: In the browser address bar, an OV SSL cert is signified in much the same way as DV SSL – with the “https” prefix in the address bar. However, when you click on the tune icon or the padlock it will display more information about that company that owns the domain, such as name, address, and country.
Pros: OV SSL certificates are considered more trustworthy than DV SSL since users will know who is behind the website and who they are giving information to. This makes it an ideal option for e-commerce sites.
Cons: OV certs take longer to issue than DV certs. Verification can take several days. However, it’s more than likely worth it for your customers’ peace of mind.

EV SSL

How it’s validated: The highest level of SSL certification you can get, when issuing EV certs, CAs do extensive background checks on the domain owning organization, validating its ownership, legal existence, physical location, and more.
What it looks like: Similar to other validation types, EV certificates are displayed with the “https” prefix in the address bar and a padlock or a tune icon.
Pros: EV certificates undergo a rigorous validation process, which includes extensive vetting of the organization's identity, providing the highest level of trust and security for website users.
Cons: An EV SSL cert is more expensive compared to the other options. The extent of the checks means verification can take a week or even more.

Self-signed SSL certificates

Another way to secure your site that isn’t recommended is through a self-signed certificate. A self-signed certificate is basically validated by the website owner rather than a CA. While such an SSL cert will have the same level of encryption as the other options, anyone can create one. For your website users, there will be no trusted third-party verification to tell them that you are who you say you are. Furthermore, most web browsers display a warning message to users trying to access sites secured with this kind of cert. Unless you’re using it for a website that is strictly private, it is recommended that you go with one of the previously mentioned validation certs.

Types of SSL certificates

Another factor that will affect the type of SSL cert you choose is how many domains you need an SSL cert for. Each SSL certificate combines the level of validation we discussed in the previous section with the number of domains you want to protect. The four types of SSL types based on the number of domains are:

Single-domain SSL certificates
Wildcard SSL certificates
Multi-Domain SSL certificates
Unified Communications SSL Certificate

Single-Domain SSL certificates

With a single-domain SSL certificate, a single domain and all the pages on that domain are protected. All three validation levels – DV, OV, and EV – are available for these kinds of certificates.

Namecheap’s offering for single-domain SSL certificates include: Standard SSL; High Assurance SSL; and EV SSL.

Wildcard SSL certificates

With a wildcard SSL certificate, a single domain and unlimited subdomains for that domain are protected. For example, if you have an SSL certificate for “yourwebsite.com”, any subdomains you add, such as “mail.yourwebsite.com” or “login.yourwebsite.com” will automatically be secured. Even if you don’t have any subdomains currently, if you plan on adding any in the future, a wildcard SSL cert will save you money and hassle as you won’t need to keep on buying individual SSL certs every time you do so. Wildcard SSL certificates can be issued with DV and OV levels of validation, but not EV.

Namecheap’s offering for Wildcard SSL certificates include Standard Wildcard SSL and OV Wildcard SSL.

Multi-Domain SSL Certificate

With a multi-domain SSL certificate, up to 100 different domains are protected. Wildcard domains can also be protected with a multi-domain SSL cert. This kind of SSL cert is ideal for organizations running multiple websites, as they only have to deal with a unified cert for all of them, rather than keeping track of individual certs for each one. Getting this kind of cert will also save money in the long run.

Namecheap’s offering for multi-domain SSL certificates include SAN Certificate and OV Multi-Domain SSL.

Choosing the best SSL types for your website

By now, you probably have a good idea of what kind of SSL certificate would best suit your website, but here are some things you should keep in mind when deciding what type of SSL certificate you should go for:

The size of your website
What kind of website it is
How many domains you have
How many subdomains you have
If you work in a Microsoft Exchange and Office Communications environment

As a general rule of thumb, DV SSL certificates are best suited to small blogs and websites that don’t request personal data from its users. OV SSL certificates are best for small and medium-sized websites that request personal data from its users, particularly online stores. EV SSL certs are best for large enterprises with multiple, front-facing web properties.

Depending on the CA issuing your SSL certificate, you should also look at compatibility issues, whether or not they’re approved by popular browsers and compatible with mobile, for example.

Conclusion

Choosing the best type of SSL certificate for your website or websites doesn’t have to be an ordeal. By bearing in mind the size and scope of your website, and whether or not you need to secure multiple domains or subdomains, you should be able to make an informed decision and be safe in the knowledge that your website users’ data is protected.