With hackers and identity thieves constantly prowling the Internet for prey, there is a greater need to safeguard information, whether personal, financial, or otherwise, that your Web site sends and receives. One way to protect sensitive information on your Web site is to use an SSL certificate to encrypt information that is sent.
If you are thinking about using an SSL certificate to safeguard your and your customer’s sensitive information, here are some of the important questions that we recommend you ask yourself when you look for a certificate provider:
- Encryption Level: Does the provider offer 128-bit or 256-bit certificates? SSL certificates are available in three types of encryption levels: 40-bit, 128-bit, and 256-bit. 128-bit is the industry standard, but 256-bit currently provides the highest available level of security.
- Browser Compatibility: Is the certificate compatible with major browsers? You cannot control what browser your buyers will be using when they visit your Web site to purchase your goods. So you need to make sure that your SSL certificate supports at least the most commonly-used browsers, such as Mozilla Firefox, Microsoft Internet Explorer, Opera, and Safari.
- Identity Validation: Does the provider care to check who you are when you apply for the certificate? Most certificate providers will validate your ownership of the domain name that you are using for your business, as well as the legitimacy of the your organization to whom the certificate will be issued. We recommend going with providers that perform this background check.
- Certificate Setup Time: How will it take for a particular provider to issue a working certificate for your domain name? Certificate providers usually have a timetable for processing applications and issuing certificates. Check with them.
- Warranty: Does the certificate provider provide any warranty or insurance against loss or misuse of the certificate? Depending on the provider, insurance coverage could range between $50 and $250,000.
- Customer Support: Does the provider offer both email and phone support? Can you reach them 24/7? Email and support hours vary, depending on the provider. If you cannot find a provider that provides 24/7 support, find one that operates within your time zone. This way, you’ll be able to reach them during the day, which is probably when you will need to reach them.
- Reissue Policy: Will the provider issue you another certificate if you lose it? Will they replace it if it does not work on your site?
There are many other questions and considerations that you need to look at before choosing a provider. The ones above, however, are the most important ones.