Which SSL certificate should you choose?

Print
  • 0

Choosing an SSL certificate depends on three things: how many names you need to cover, the level of verification your visitors expect and how much of the management you want to delegate. OpenVista offers the free certificate included with hosting, paid certificates with organisation or extended validation, and installation and monitoring options. A higher validation level does not change the strength of the encryption: it changes what the certificate proves about your organisation.

Start with the included certificate

On our cPanel hosting plans, a Let's Encrypt certificate is included: it encrypts traffic, shows the padlock in browsers and renews automatically. It is enough for a brochure site, a blog or a simple intranet. Its limits: domain validation only, no company name in the certificate, and issuance that depends on domain validation — it fails if DNS records do not point to the hosting account yet.

Understanding validation levels

  • DV (Domain Validation): only the domain is checked. Fast issuance, suitable for information sites and internal projects.
  • OV (Organization Validation): the company's legal existence is verified and its name appears in the certificate. This is the level most business customers expect.
  • EV (Extended Validation): stronger organisation checks, suitable for payment sites and exposed brands.

All three levels encrypt traffic the same way; the difference lies in the vetting behind the certificate and in the information it displays to visitors and to their browsers.

One name, several names or all subdomains

A single certificate covers one hostname. A wildcard certificate covers every subdomain at one level (*.example.com): useful for a shop with several areas. A multi-domain certificate covers several distinct names, for example a brand and its variants. Decide on this dimension first, then on the validation level.

The OpenVista catalogue

RapidSSL, GeoTrust and DigiCert brands

Quick decision guide

  • Brochure site on cPanel hosting: the included Let's Encrypt certificate is enough.
  • Company serving business customers: an OV certificate, with the organisation name in the certificate.
  • Online shop and payments: an EV certificate.
  • Several subdomains: a wildcard certificate.
  • Several distinct domains: a multi-domain certificate, such as SSL Enterprise Multi-domain or SSL EV Multi-domain.
  • Agency managing client sites: the Agency SSL pack.
  • Server you administer yourself: the SSL installation option avoids deployment mistakes.

Validation level and number of names are selected at order time: the product page shows the full feature list and the current price. Whatever you choose, plan the renewal: certificates are issued for a fixed period and must be renewed or reissued before they expire.

See also


Was this answer helpful?

« Back