Which SSL certificate is right for your website?

Een hot topic momenteel: het beveiligen van je website met HTTPS, oftewel het koppelen van een SSL certificaat. Based on the security needed for your site, you can choose from the range of certificates available. The European privacy law AVG/GDPR requires websites and Web shops with contact forms or newsletter subscription forms to comply with the new regulations. We have an article on this: The AVG is coming. What does that mean to you? on our site. Several browsers mark websites without a certificate as unsafe. But what security does a certificate offer you and your customers? To help you see the forest for the trees, we have listed below the 3 different types* of SSL certificates with their advantages, disadvantages and application.

Domain Validation SSL

The “Domain Validation SSL” (commonly called DomainSSL or DV SSL) is the least comprehensive form of SSL certification. The Certificate Authority checks at the time of application that the browser connection actually ends up at the named website. If so, the certificate is issued and the data sent is encrypted.

Benefits of Domain Validation SSL:

The application process is very short, the domain name can be issued almost immediately after application.
This is immediately the most economical SSL certificate.

Disadvantages of Domain Validation SSL:

User reliability is only guaranteed to a limited extent. Only the connection to the website is checked, but no checks are made on the underlying organization.

Application:

The DomainSSL is mainly used by websites that want a cheap and fast SSL solution where little or no personal data is collected and no financial transactions take place on it.

Extended Validation SSL

The “Extended Validation SSL,” also called ExtendedSSL or EV SSL, is the most comprehensive form of SSL available. During the validation process, all things are checked that are also done for the other 2 SSL certificates. Furthermore, a thorough validation of the company is conducted. This involves checking such things as the legal, physical and operational existence of the organization. Issuance of an ExtendedSSL certificate is done according to strictly established guidelines. The Extended Validation SSL is the most reliable form of SSL.

Benefits of Extended Validation SSL

The most secure SSL certification, users are guaranteed security on all aspects.
Beyond the standard “https” and the “lock in the browser bar,” ExtendedSSL colors the entire bar green or the text of the url. This makes safety extra clear to users.

Disadvantages of Extended Validation SSL

The validation process takes the longest of all the options. Beyond requiring the applicant to provide additional documentation about the organization, the Certificate Authority will make personal contact with the applicant.

Application:

ExtendedSSL is used by Web sites that are serious about the security of their users. Furthermore, as a rule, these are also the websites where a lot of financial data is handled, such as web shops.

By which authority are the SSL certificates issued?

A Certificate Authority (CA) issues an SSL certificate. This authority is an independent 3rd party that certifies that an SSL certificate belongs to the organization, server or organization mentioned in the SSL certificate. They declare this by signing the certificate’s public key with their own certificate. This is a seal of approval, declaring that the holder is trustworthy.
So applying for an SSL certificate is done at a Certificate Authority. And the difference between SSL certificates comes from the amount of research the Certificate Authority does on the applicant and thus to what extent they can ensure reliability.

Were you able to make a choice?

In case you are still not quite sure which SSL certificate you want to buy or is best suited for your website. In that case, simply contact
contact us
and we will be happy to help you make the right choice.

*In this article, we excluded Let’s Encrypt. More about choosing paid SSL can be found in this
support article
.