FORMIDABLE CA ESSENTIAL WILDCARD SSL CERTIFICATE


1.   What is SSL?

SSL is an acronym for Secure Sockets Layer, a global standard security technology developed by Netscape in 1994.

 

Secure Sockets Layer, SSL, is the standard security technology for creating an encrypted link between a remote system and a client– for example a web server and browser. This link ensures that all data passed between the web server and browser remains private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers.

 

2.   What is an SSL certificate?

SSL Certificates are small data files that digitally bind a cryptographic key to an organization’s details. When installed on a server it allows secure connections from that server to a remote client; eg, between a web server and a web browser.

 

SSL Certificates can be used in many scenarios where and data transfer needs to be authenticated and/or encrypted. Examples of this are;

 

  • Secure web browsing
  • Online transactions
  • Sending and receiving of email
  • Secure storage and transfer of data
  • Proving the authenticity and integrity of applications, or other code

 

3.   What is a wildcard Certificate?

A Wildcard certificate is a type of Certificate which protects multiple sub-domains with a single certificate. For example, domain.com might use the sub-domain cart.domain.com to handle shopping cart, and intranet.domain.com for secure emplyee logins.

 

4.   What does a Formidable CA Essential Wildcard SSL Certificate cost?

The Formidable CA Essential Wildcard SSL Certificate has at least as many features as those provided by other companies and is considerably less expensive than most.

 

They are most cost-effective when purchased as a multi-year package. A one year Certificate costs just ????? while 5 year coverage costs only ???? per year.

 

5.   Why do I need an SSL Certificate?

In today's environment, online customers are more wary than ever of Internet fraud, identity theft and "phishing" schemes. Installing the proper security and validation for your site is essential in gaining your customers' trust and letting potential customers know your site is a secure place where they can exchange confidential information, purchase products and services and complete secure transactions.

 

6.   Why Formidable CA Essential Wildcard SSL Certificates?

Formidable CA Essential Wildcard SSL Certificates are highly trusted SSL certificates providing the industry standard encryption at a low entry-level cost. It's a paperless validation system which validates the ownership of the domain (only) and sub-domains (only ). These certificates come with a golden padlock and 99.9% browser trust, and are ideal for non E-Commerce sites that require encryption. With a Formidable CA Essential SSL certificates, you have within minutes a high level of security with the golden padlock that your customers will look for to verify that your site is secure.

 

7.   Who can issue SSL Certificates?

SSL Certificates can be issued by anybody using freely available software such as Open SSL or Microsoft's Certificate Services manager. Such SSL Certificates are known as "self-signed" Certificates. However, self-signed SSL Certificates are not inherently trusted by customer's browsers and, while they can still be used for encryption, they’ll cause browsers to display "warning messages" - informing the user that the Certificate has not been issued by an entity the user has chosen to trust.

 

Such warnings are undesirable for commercial sites as they alarm visitors and drive away customers. In order to avoid such warnings the SSL Certificate must be issued by a "trusted certifying authority" (third party Certification Authorities like Formidable CA) that utilize their trusted position to make available "trusted" SSL Certificates.

 

8.   What is a Certification Authority?

Browsers and Operating Systems come with a pre-installed list of trusted Certification Authorities, known as the Trusted Root CA store. As Microsoft and Netscape provide the major operating systems and browsers, they have elected whether to include the Certification Authority into the Trusted Root CA store, thereby giving trusted status.

 

SSL certificates issued by trusted Certification Authorities do not display a warning and establish a secure link between website and browser transparently. In such circumstances, the padlock signifies the user has an encrypted link with a company who has been issued a trusted SSL Certificate from a trusted Certificate Authority.

 

Microsoft and Netscape have therefore determined the role of the Certification Authority - to use their trusted status to "pass trust" to websites whom ordinarily would not be trusted by a customer. As a result of their "trusted" status, Certification Authorities have a responsibility to ensure they only ever issue SSL Certificates to legitimate companies. This may only be achieved by employing stringent validation processes to ensure issuance practices only allow the SSL Certificate to be issued to a legitimate company. After all, anyone relying on the presence of an SSL Certificate will do so not just for the encryption factor, but also to indicate the legitimacy of the site.

 

9.   Do all SSL Certificates provide the same security and trust?

No.

 

The value of SSL is protected by one or two standard validation processes:

 

  1. Verify that the applicant owns, or has legal right to use, the domain name featured in the application.
  2. Verify that the applicant is a legitimate and legally accountable entity.

 

Our Essential SSL certificates use check 1 above and are suitable for internal business systems used by your employees. They can be used on websites; however the Premium and EV Certificates (which use check 2 above) are more suitable due to the additional business checks performed as part of the order process.

 

The EV certificate takes these checks even further to ensure the website you are connected to is genuine and trustworthy, and is the only certificate to give the green browser bar as visual verification that your transactions are safe. This means that while all Certificates will secure your site, the Premium and EV products give your customers extra reassurance that the site they are trusting is genuine. In addition, the use of the Formidable CA Corner of Trust increases that reassurance even more.

 

10. Why do different SSL Certificates contain different information?

Our most basic Essential SSL Certificate only verifies domain names whereas our Premium and EV SSL Certificates are issued with either full business authentication or Extended Validation (EV) authentication, both of which require more information to validate the requesting business.

 

11. What is the Formidable CA Corner of Trust?

The Formidable CA Corner of Trust is a dynamic, animated graphic that displays on web pages secured by our SSL Certificates. When a visitors mouse hovers over your TrustLogo, a small window appears to display information about your business. This helps establish credibility by letting them see that your business has been validated by a trusted third party. Additionally, it displays these vital identity details without distracting pop-ups or redirects, keeping your visitor on your site.

 

12. How will customers know that my site is secure?

When you have an SSL Certificate installed on your server, your site will display:

  1. A padlock symbol that appears in their web browser when your site is opened
  2. The "https" prefix in front of your URL address in the browser.

 

The Formidable CA Corner of Trust is clearly visible and gives additional reassurance.

 

When you install an Extended Validation certificate, the browser bar on newer versions of web browsers will appear green whenever your site is opened, indicating that your site has the highest level of validation available.

 

13. How do consumers check authentication information held within a certificate?

When browsing a secure suite, the remote server sends the certificate information to the browser. This information can be viewed by either clicking the closed padlock, checking the green address bar (if secured by an EV Certificate) or clicking the Formidable CA Corner of Trust.

 

14. Do Formidable CA SSL Certificates work with all browsers?

Our certificates are recognised by 99.3% of browsers in use today, and cover all popular desktop and mobile browsers.

 

15. What do you do to verify my right to use a domain name?

As part of our Certificate issuance, we have direct access to the IdAuthority, the largest commercial directory on the web. We can therefore expedite the validation of an application. This efficient and highly effective validation method ensures we can issue a Certificate at a greatly reduced cost as well as maintain a level of validation far superior to the methods employed by other SSL providers. In particular, the validation process employed to issue an Essential SSL Certificate is considerably more than just a domain name ownership check. We firmly believe this method alone to be insufficient to maintain the level of integrity in Secure Sockets Layer (SSL) that consumers have come to expect.

 

16. How long does verification take?

Provided we have sufficient validation information available through the IdAuthority, your Essential SSL certificate can be issued in just minutes. If additional verification processes must be used to validate your application, the issuance process may take slightly longer. In such cases we guarantee that the Certificate is issued within 2 working days.

 

17. What is a Certificate Signing Request or CSR?

The CSR is a string of text generated by your server software and is needed as part of the certificate order process. You provide this string of text during the enrolment process to enable us to issue an SSL Certificate unique to your web server.

 

18. Can I secure multiple servers with a single certificate?

Yes, however it is not recommended due to additional security exposure and risk, except when certificates are to be shared for redundant server backups, server load balancing, and SSL accelerators.

 

19. How do I receive my SSL Certificate?

When you purchase your SSL Certificate, it is issued electronically (no paperwork needed) and within minutes after confirming an email. Once all validation is complete, the SSL Certificate is issued electronically and is ready for installation.

 

20. What is a Warranty?

Formidable CA Essential SSL Certificates come with warranties so that your site's visitors can have confidence when conducting a transaction with you.

 

The amount represents the maximum amount site visitors may receive in compensation for losses resulting directly from an online credit card transaction as a result of a mis-issued Certificate.

 

All warranties are subject to the terms of our relying party warranty.

 


© Copyright Formidable Solutions Ltd 2014 All rights reserved. E&OE VAT number: 138043919
Formidablesolutions.com is a trading name of Formidable Solutions Limited, a company registered in England and Wales.
Company number: 06831675