The Trust Service product suite

The OpenSRS Trust Service offers SSL Certificates that encrypt communications between users and SSL (Secure Socket Layer) e-commerce sites. Data sent via an SSL connection is protected by encryption, a mechanism that prevents eavesdropping and tampering with any transmitted data. SSL provides businesses and consumers with the confidence that private data sent to a Web site, such as credit card numbers, are kept confidential. Web server certificates (also known as secure server certificates or SSL Certificates) are required to initialize an SSL session.

Customers know when they have an SSL session with a website when their browser displays the little gold padlock and the address bar begins with a https rather than http. SSL Certificates can be used on Web servers for Internet security and mailservers such as IMAP, POP3, and SMTP for mail collection and sending security.

Business websites must have an SSL Certificate to:

  • Validate online businesses by a globally recognized third party
  • Encrypt sensitive data such as credit card numbers or passwords

All Trust Services offered through OpenSRS have the highest encryption levels available, compatible with over 99% of all browsers and include globally recognized certification seals.

The OpenSRS Trust Services offering includes certificates from Comodo, GeoTrust, SiteLock, Symantec, thawte, and Trustwave.

The terms vary by supplier and product, and range from one to four years.

The OpenSRS Trust Service includes products from the most trusted and most recognized certificate providers: Comodo, GeoTrust, SiteLock, Symantec, thawte, and Trustwave.

  • Comodo offers a comprehensive range of highly-trusted SSL certificate products designed to meet the needs of every business.
  • GeoTrust is one of the world's largest SSL certificate providers, with more than 100,000 customers in over 150 countries. Its product line is extremely popular with small businesses.
  • SiteLock offers website security products that meet the needs of small business without requiring CSRs or web server installation scripts. It performs daily malware, network, and spam scans, and provides a trust seal that lets visitors know that the site is safe.
  • Symantec resonates very well with large companies and corporations that want to obtain the highest levels of security possible.
  • thawte is a leading provider of domain, business and extended validation SSL certificates. Its brand is particularly strong in Europe, and appeals to European businesses.
  • Trustwave helps companies of all sizes reduce SSL costs while maintaining a high level of trust and security.

Types of SSL certificates

The type of SSL certificate that you choose depends on whether you want to validate a single domain or an entire enterprise, and also the level of validation that you want to provide.

Domain certificates

SSL Certificates for domains ensure that the domain has been authenticated by a recognized certificate provider. Visitors to the site can click on the seal to verify that the certificate is still valid, giving site visitors extra peace of mind.

The provisioning time for domain certificates is 10 minutes.

Organization certificates

When corporate identity verification is important, an SSL Certificate for the organization assures customers that the website is trustworthy and secure.

The provisioning time for organization certificates is two to four business days.

Wildcard certificates

Wildcard SSL Certificates may be used for situations where several same-domain web sites need to be secured but the hostnames or sub-domains vary. You can secure as many sub-domains on one physical box as you like as long as they share the same second level domain name. To do this, the domain/common name in the CSR needs to be "*.mydomain.com". The asterisk is a place holder and enables you to secure different sub-domains that share the same base/second level domain name such as "mydomain.com" in our example. If you need to secure sub-domains on multiple boxes, you need to purchase separate wildcards for each box.

The provisioning time for wildcard certificates is two to four business days.

SAN certificates

Subject Alternative Name (SAN) certificates allow you to specify a list of additional domains or other entities that will be covered by a single SSL certificate. This means that, depending on the product, you may be able to specify multiple top-level domains, subdomains, IP addresses, internal server names, and more. The total number that you can protect with a single certificate varies by product.

Note: SAN certificates are sold as packages, so if you purchase a SAN certificate that can secure four additional domains, but you specify only two, you will still be charged the same price. You may be able to add more domains to a package for an additional charge. For more information on pricing, see http://www.opensrs.com/site/services/ssl.

These multi-domain certificates are more flexible than wildcard certificates because they are not limited to the same domain or the same number of levels.

The provisioning time for SAN certificates is two to four business days.

Product Additional domains
allowed
Allows server names
without any periods
Allows Intranet and
local names
Allows private IP
addresses per RVC 1597
True BusinessID SAN 4 to 100 Yes Yes Yes
True BusinessID with EV SAN 4 to 100 No No No
QuickSSL Premium SAN 4 (subdomains only) Yes Yes Yes
Secure Site SAN 1 to 24 Yes Yes Yes
Secure Site Pro SAN 1 to 24 Yes Yes Yes
Secure Site with EV SAN 1 to 24 No No No
Secure Site Pro with EV SAN 1 to 24 No No No
SSL Web Server SAN 1 to 24 Yes Yes Yes
SGC SuperCerts SAN 1 to 24 Yes Yes Yes
SSL Web Server with EV SAN 1 to 24 No No No

Extended Validation (EV) certificates

With Extended Validation, as well as displaying the certificate seal, the address bar is displayed in green, providing customers with an extra level of confidence. The green address bar is a strong visual indication that the site has an Extended Validation Certificate. The Security Status bar displays the organization name and the name of the Certificate Authority (CA).

The provisioning time for EV certificates is five to seven business days.

Site seals

A site seal certifies the owner of the site has been verified and that the site is free of malware.

Seal products can be used in two ways:

  • By site owners who don't require an SSL certificate but want to add an additional layer of assurance/reputability to their business.
  • By site owners who already have an SSL certificate but want to add an additional layer of security.

SiteLock seals

Every website protected by SiteLock goes under an evaluation which includes:

  • Verification of the website owner's contact information.
  • Checks for malware, viruses, SQL injections and cross-site scripting vulnerabilities.
  • Verifies email addresses and servers haven't been included on spam blacklists.

No CSRs or web server installation scripts are required.

GeoTrust Web Site Anti-Malward Scan

The GeoTrust Web Site Anti-Malware Scan product offers malware scanning and a trust seal.

This product is not vetted. When the order is processed, GeoTrust sends the customer an email to let them know that their site is being scanned. The email also includes instructions on how to log in to their account on the GeoTrust site.

When the initial malware scan completes, GeoTrust sends another email to the customer to let them know whether their site passed or failed the scan. If the site passed the scan, the email contains a link to the GeoTrust seal configuration page where the customer can access the seal to display on their website.

GeoTrust continues to scan the website on a regular basis and notifies the customer only if the scan fails. If it fails, the seal is removed from the site, and the customer must correct the issues on their site. GeoTrust will reinstate the seal after the next successful scan.

A customer can request an on demand scans only if the previous scan failed. Additionally, they cannot request a scan if a scan is already in progress.

Notes:

For the GeoTrust Web Site Anti-Malware product, all communications and account management tasks take place between the customer and GeoTrust; OpenSRS and the Reseller are only involved in ordering and renewing the product.

thawte SGC Supercerts are discontinued as of July 1, 2015; they also cannot be renewed after that date.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       
Certificate TypeVerifiesRequirementsIncludesTerm
Comodo Certificates
EV SSL Full Organization Admin, organization, and signer contacts SSL Certificate & Comodo TrustMark plus green bar 1-2 years
InstantSSL Domain and Organizatio Organization contact SSL Certificate & Comodo TrustMark 1-3 years
PremiumSSL Domain and Organization Organization contact SSL Certificate & Comodo TrustMark 1-3 years
PremiumSSL Wildcard Single domain only Organization contact SSL Certificate & Comodo TrustMark 1-3 years
SSL Single domain Organization contact SSL Certificate 1-3 years
SSL Wildcard Domain and subdomains Organization contact SSL Certificate 1-3 years
GeoTrust SSL Certificates
QuickSSL Domain only Domain authorizedemail SSL certificate & seal 1-3 years
QuickSSL Premium Domain only Domain Authorized E-mail SSL certificate & True Site Seal 1-3 years
QuickSSL Premium SAN Primary domain plus 4 subdomains Domain Authorized E-mail SSL certificate & True Site Seal 1-3 years
True BusinessID Full Organization Proof of Organization or DUNS Number and WHOIS SSL Certificate & True Site Seal 1-3 years
True BusinessID SAN Organization plus 4 domains; can add up to 24 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & True Site Seal 1-3 years
True BusinessID Wildcard Full Organization Proof of Organization or DUNS Number and WHOIS SSL Certificate & True Site Seal 1-3 years
True BusinessID with EV Domain and Organization plus Extended Validation Proof of Organization or DUNS Number and WHOIS SSL Certificate & True Site Seal plus green bar 1-2 years
True BusinessID with EV SAN Organization plus 4 domains, including Extended Validation. Can add up to 24 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & True Site Seal plus green bar 1-2 years
Web Site Anti-Malware Scan Domain Admin, Billing, and Tech contacts Site Seal 1 year
SiteLock
Find Business verification and one-time scan of website Web and business addresses Site seal 1 year
Fix Business verification and extensive malware scanning Web and business addresses Site seal 1 year
Prevent Business verification and Enterprise-level protection with constant network scans Web and business addresses Site seal 1 year
Symantec Certificates
SecureSite Full Organization Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal 1-3 years
SecureSite SAN Organization plus 1 domain; can add up to 24 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal 1-3 years
SecureSite Pro Full Organization Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal 1-3 years
SecureSite Pro SAN Organization plus 1 domain; can add up to 24 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal 1-3 years
SecureSite with EV Full Organization plus Extended Validation Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal plus green bar 1-2 years
SecureSite with EV SAN Organization plus 1 domain, including Extended Validation. Can add up to 24 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal plus green bar 1-2 years
SecureSite Pro with EV Full Organization plus Extended Validation Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal plus green bar 1-2 years
SecureSite Pro with EV SAN Organization plus 1 domain can add up to 24 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & Secured Seal plus green bar 1-2 years
thawte SSL Certificates
SSL123 Domain & Organization Domain authorized email SSL Certificate & Trusted Site Seal 1-3 years
SSL WebServer Certificates Full Organization Proof of Organization or DUNS Number and WHOIS SSL Certificate & Trusted Site Seal 1-3 years
SSL WebServer Certificates with SAN Organization plus 1 domain; can add up to 4 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & Trusted Site Seal 1-3 years
SSL WebServer Certificates with EV Full Organization plus Extended Validation Proof of Organization or DUNS Number and WHOIS SSL Certificate & Trusted Site Seal plus green bar 1-2 years
SSL WebServer with EV SAN Organization plus 1 domain; can add up to 4 domains for additional cost Proof of Organization or DUNS Number and WHOIS SSL Certificate & Trusted Site Seal plus green bar 1-2 years
SSL Web Server Certificates Wildcard Full Organization Proof of Organization or DUNS Number and WHOIS SSL Certificate & Trusted Site Seal 1-2 years
TRUSTe
Privacy Policy with seal Single domain Individual contact Hosted Privacy Policy plus seal 1-3 years
Privacy Policy Single domain Individual contact Hosted Privacy Policy only 1-3 years
Trustwave Certificates
Domain Vetted (DV) Single domain only Admin contact SSL Certificate & Trusted Commerce Site Seal 1-3 years
Premium EV Full Organization Admin contact SSL Certificate plus green bar 1-2 years
Premium SSL Full Organization Admin contact SSL Certificate & Trusted Commerce Site Seal 1-3 years
Premium SSL Wildcard Full Organization Admin contact SSL Certificate & Trusted Commerce Site Seal 1-3 years
Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.
Powered by Zendesk