easyDNS offers the following SSL Certificates:
- DigiCert
- GeoTrust
- RapidSSL
- Thawte
- Sectigo (rebranded Comodo)
Before purchasing a certificate, please strongly consider the types of validation methods that are required to secure a certificate.
Domain Validated (DV): Inexpensive and very quick to get issued. For those looking for encryption, this protection is recommended for internal use, personal & hobby sites, and small forums that have logins, forms, or other non-transactional data. DV certs really shouldn’t be used for commercial purposes. Validation is done only through the domain’s Whois record. It will display a padlock and HTTPS.
Organisation Validated (OV): Affordable protection for small businesses to display trust. Recommended for small to mid-sized business sites where validation of the company is important. Can be used for sites with low-volume eCommerce transactions. It will display a padlock and HTTPS. Validation takes a few days and the organisation is strictly authenticated by the personnel of the Certification Authority [CA] to confirm legitimate business information [using business listings such as Dun & Bradstreet].
Extended Validated (EV): Proven to boost your customer confidence as this is maximum security and trust. Recommended for mid-sized to enterprise sites where visitor confidence is key. A must for trustworthy websites with eCommerce, online banking, and secure customer information. EV Certs are distinguished by the browser displaying the Green Address Bar along with the padlock and HTTPS. Issuance can take a week to go through a rigorous validation process with the Certification Authority [CA].
Wildcard: A wildcard certificate allows for unlimited subdomains to be protected with a single certificate.
SAN [Subject Alternative Name]: A SAN certificate allows for multiple domain names to be protected with a single certificate.
• For help generating a CSR [certificate signing request] on your server, please visit this Digicert’s page. CSR’s include data for the order of the cert – domain, organisation, organisation unit, locality, state, country, key size, and email address. These all must match the certificate order to be accepted by the Certificate Authority. Please use a CSR parser to confirm the information is valid.
• For GeoTrust videos on generating a CSR and reissuing & installing certificates on various servers, please visit GeoTrust’s YouTube page.
• To reissue or cancel a GeoTrust, RapidSSL, DigiCert, or Thawte certificate, please visit Digicert’s Guest Portal to sign in. Certificates must be canceled within 30 days of issuance to qualify for a refund by the certificate authority.
For older certificate management, please visit the GeoTrust User Portal here.
Any questions, please contact easyDNS support [support@easydns.com or 1.855.321.3279].
• To reissue or cancel a Sectigo (Comodo) certificate, please get in touch with easyDNS support to get that assistance.
• For instructions on changing from SHA1 to SHA2, please visit here.
• Digicert offers an SSL Installation Diagnostics Tool to aid with installation problems.
Certificate order domain validation for approval is supported in your easyDNS account either by email or DNS entry. By selecting the DNS validation route, we will send the DNS record (TXT) entry you need to add to the zonefile for the domain immediately after payment has been made. The entry will be detected very soon after by the certificate issuer, then they will follow up by sending the certificate via email for you to install on your server. Sectigo does not support DNS validation.
Following the European Union GDPR requirements and the various policies of private whois records, these generic email addresses are the only options for the validation of a certificate via email. This email address is based on the domain you purchased the certificate for.
admin@domain.com
administrator@domain.com
hostmaster@domain.com
webmaster@domain.com
postmaster@domain.com
• Term Length: On 27 February 2020, easyDNS adjusted to a 1-year maximum for all certificates. This was in reaction to Apple’s new policy that commenced on 01 September 2020 that only supports 1-year cert terms for authentication and recognition of that secure server. Please see Apple’s article on this here.
SSL certificates can only be valid for a maximum of 398 days. Web browsers such as Safari, Chrome, and Mozilla enforce the shorter 398-day lifetimes on certificates. We recognise this is more work for certificate users but makes the certificates much safer with the yearly renewal (contact updates, security changes, and also reducing the exposure window if a certificate is compromised). DigiCert’s article on 1-year certs is found here.
• Renewals
– please be mindful that SSL certificates should be renewed within 30 days before expiry to not lose a month of the current term of 13 months. Certs can be renewed up to 60 days before expiry but it’s beneficial to delay until only a few weeks left. Please consider using our auto-billing process to alleviate concerns as certificates will be renewed in the last 30 days.
• All new certificates are automatically logged and Certificate Transparent [CT] compliant – this is to comply with Google Chrome and Apple’s CT policy.
• Certificates are provided in Base64 encoded X.509 format. If your server or device requires a different format (ie PEM or DER), please refer to this Digicert help page.
• List of DigiCert supported countries and their country codes for the CSR can be found here.
• Allowable characters: it should be noted that for publicly trusted certs, the underscore (_) is not supported in either the common hostname (subject common name) or SAN (subject alternative name). There are two options if you’re unable to rename the hostname – a wildcard certificate will allow other characters (as it’s not in the cert hostname) or use a private certificate (if allowable for the application of the cert, as it will not work on the public internet).
- Lowercase letters a–z
- Uppercase letters A–Z
- Digits 0–9
- Special characters: period (.) and hyphen (‐)
______________________________________________________________
• RapidSSL
RapidSSL certificates are an affordable and easy way to secure an internal server, a hobby website, or a small forum. RapidSSL is very easy to install and includes a Site Seal to display on the page. RapidSSL is backed by the GeoTrust infrastructure and includes a $10,000 warranty against miss-issuance.
RapidSSL Certificates are available starting at $24.95 per year. Maximum of 1 year.
Summary:
- 30-day cancellation period
- Domain validated DV
- Mobile friendly
- Fast issuance and they’re easy to install
- Free reissues
- Domain control validation, up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- RapidSSL Site Seal
———————————-
• RapidSSL Wildcard
RapidSSL Wildcard certificates are an affordable and easy way to secure an internal server, a hobby website, or a small forum. RapidSSL Wildcards are to secure all of your subdomains on one certificate. They are backed by the GeoTrust infrastructure and include a $10,000 warranty.
RapidSSL Certificates are available starting at $159.95 per year. Maximum of 1 year.
Summary:
- 30-day cancellation period
- Unlimited subdomains
- Mobile friendly
- Fast issuance and they’re easy to install
- Free reissues
- Domain control validation DV
- Up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- RapidSSL Site Seal
______________________________________________________________
• True Business ID EV **Recommended**
The True Business ID EV certificate is the highest level of authentication available among SSL certificates. The Green Address Bar displays trust and confidence in site security to your customers. The GeoTrust dynamic Secured Seal Trustmark, containing the live date and time stamp, assures your customers that their credit card and other information will not be viewed, intercepted, or altered. This makes it ideal for corporate and e-commerce websites. Includes a $1,500,000 warranty.
True Business ID EV is validated through Extended Validation which can take up to 1 week before issuance. GeoTrust will authenticate the organisation listed in the order and domain whois record plus do in-depth identity checks before issuance. Recommended for a mid-level to Enterprise size business seeking to display the maximum level of trust.
True Business ID EV certificates are available starting at $225USD per year. Maximum of 1 year. SAN‘s are $30USD/each per year (a minimum of 4 required).
Summary:
- Green Address Bar – E-commerce recommended
- Increased conversion rates and reduced shopping cart abandonment
- Protect your brand from phishing schemes
- SAN – Minimum order is 4 SANs
- Mobile friendly
- FREE lifetime, self-service reissues
- Extended Validation EV
- 256-bit encryption signed with a 2048-bit root
- Live date and time stamp
- Compatible with 99% of all browsers
- Assurance: $1,500,000 USD warranty, GeoTrust dynamic True Site Seal trademark
- Business registration
- Instills consumer confidence with site seal ensuring transaction encryption
———————————-
• QuickSSL — DISCONTINUED — existing certs are renewed as QuickSSL Premium as of 13 October 2020
———————————-
• QuickSSL Premium
The QuickSSL Premium certificate combines the functionality of the QuickSSL certificate with a GeoTrust smart seal – all provisioned within a few hours. The high visibility seal, containing the live date and time stamp, assures your customers that their credit card and other information will not be viewed, intercepted, or altered. This makes it ideal for corporate and e-commerce websites. Includes a $500,000 warranty.
QuickSSL Premium offers the strongest real-time authentication process on the market today using the ChoicePoint Unique Identifier, GeoTrust’s industry-recognised domain control authentication, and two-factor telephony authentication.
SAN supported but only applies to subdomains – this is a cross between a wildcard and a SAN. For multiple domains on one certificate, you will need to purchase the TrueBusiness certificate. SAN certs now include free WWW protection – for the SAN hostnames, to have WWW protection, you would provide the WWW hostname, and then the root name would be protected also.
QuickSSL Premium certificates are available starting at $100 per year. Maximum of 1 year. SANs are $30USD/each per year (a minimum of 4 required).
Summary:
- Fully automated provisioning process
- Mobile friendly
- FREE lifetime, self-service reissues
- Domain control validation DV
- 256-bit encryption signed with a 2048-bit root
- Live date and time stamp
- Compatible with 99% of all browsers
- Assurance: $500K USD warranty, GeoTrust dynamic True Site Seal trademark
- QuickSSL Premium authenticates the domain name
- Real-time, two-factor telephone authentication
- Business registration
- Instills consumer confidence with site seal ensuring transaction encryption
———————————-
• True Business ID
True BusinessID delivers a new level of online security for both you and your customers. It offers comprehensive Internet security coverage by combining state-of-the-art 256-bit SSL encryption and identity verification in a single bundle. You benefit from unsurpassed browser and server recognition, as well as airtight access protection and fraud prevention. Your customers are assured of your authenticity.
True BusinessID brings the patented “Smart Seal” technology to your web pages. Your customers can immediately identify your site as genuine, authentic, and validated by an independent third party. When your customer clicks on the True Site “Smart Seal”, the server automatically checks the domain name, and relevant information about your company is presented – assuring your legitimacy. This promoted greater customer confidence resulting in more e-commerce activity and a significant increase in online revenue. Includes a $1,250,000 warranty.
SAN is supported on an individual basis. This supports different domain names under one certificate. SAN certs now include free WWW protection – for the SAN hostnames, to have WWW protection, you would provide the WWW hostname, and then the root name would be protected also.
Our True BusinessID certificates are easy to install and renew. True BusinessID certificates are available starting at $169USD per year. Maximum of 1 year. SAN‘s are $30USD/each per year (a minimum of 4 required).
Summary:
- Convenient online purchase and installation
- Mobile Friendly
- Organisation Validated OV
- FREE lifetime, self-service reissues, unlimited server licenses
- True BusinessID authenticates the business / organisation
- Identity verification Smart Seal – embedded with YOUR company name/date/time in the stamp
- Compatible with 99% of all browsers
- Assurance: $1.25M USD warranty, GeoTrust dynamic True Site Seal trademark
- 256-bit encryption signed with a 2048-bit root
- Provisioned in 1-2 business days
———————————-
• True Business ID Wildcard
The True BusinessID Wildcard certificate is an easy and affordable solution for organisations looking to secure multiple subdomains through one certificate, reducing management time and cost. It is ideal for web hosting firms and corporations wishing to serve multiple sites of the same base domain name.
For example, you could secure:
- www.mycompany.com
- shop.mycompany.com
- extranet.mycompany.com
- download.mycompany.com
- support.mycompany.com
With one Wildcard certificate, you get high levels of encryption and authentication for multiple hostnames on multiple servers. And, as your online demands grow, you can continue to add more subdomains to the same server at no additional cost. True BusinessID Wildcard certificates save you the expense of acquiring and managing multiple server certificates.
They offer comprehensive Internet security coverage by combining state-of-the-art 256-bit SSL encryption and identity verification in a single bundle. You benefit from the unsurpassed browser and server recognition, as well as airtight access protection and fraud prevention. Your customers are assured of your authenticity.
True BusinessID Wildcard brings the patented “Smart Seal” technology to your web pages. Your customers can immediately identify your site as genuine, authentic, and validated by an independent third party. When your customer clicks on the True Site “Smart Seal”, the server automatically checks the domain name, and relevant information about your company is presented – assuring your legitimacy. This promotes greater customer confidence resulting in more e-commerce activity and a significant increase in online revenue. Includes a $1,250,000 warranty.
Our True BusinessID certificates are easy to install and renew. True BusinessID certificates are available starting at $475USD per year. Maximum of 1 year.
Summary:
- Secure multiple sites on one physical machine
- Mobile Friendly
- Organisation Validated OV
- Assurance: $1.25M USD warranty, GeoTrust dynamic True Site Seal trademark
- True BusinessID Wildcard authenticates the business / organisation
- Identity verification Smart Seal – embedded with YOUR company name/date/time in the stamp
- FREE lifetime, self-service reissues
- Convenient online purchase and installation
- Compatible with 99% of all browsers
- 256-bit encryption signed with a 2048-bit root
- Provisioned in 1-2 business days
______________________________________________________________
*As of late 2018, Comodo CA is now Sectigo*
• Sectigo DV SSL
Sectigo SSL certificates are an affordable and easy way to secure an internal server, a hobby website, or a small forum. High encryption levels and hassle-free validation. Sectigo SSL includes a $10,000 warranty.
Sectigo SSL is available starting at $85 per year. Maximum of 1 year.
Summary:
- 30-day cancellation period
- Mobile friendly
- Fast issuance and they’re easy to install
- Free reissues
- Domain control validation DV
- Up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Sectigo static Site Seal
———————————-
• Sectigo Instant SSL Premium
Sectigo offers an affordable certificate that is business-validated. High encryption levels for a small to mid-size business. Sectigo SSL includes a $250,000 warranty.
Sectigo SSL is available starting at $95 per year. Maximum of 1 year.
Summary:
- 30-day cancellation period
- Mobile friendly
- Issuance takes a few days to one week
- Free reissues
- Organisation validation OV
- 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Sectigo Dynamic Site Seal
———————————-
• Sectigo Premium SSL Wildcard
Sectigo Premium SSL Wildcard certificates are affordable certificates that are business-validated. High encryption levels for a small to mid-size business that covers the domain and unlimited subdomains. Sectigo Premium SSL Wildcard includes a $250,000 warranty.
Sectigo SSL is available starting at $425 per year. Maximum of 1 year.
Summary:
- 30-day cancellation period
- Mobile friendly
- Issuance takes a few days to one week
- Free reissues
- Organisation validation OV
- Up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Sectigo Dynamic Site Seal
———————————-
• Sectigo EV SSL
Sectigo EV SSL certificates are affordable certificate that is issued through Extended Validation. High encryption levels provide trust for a mid-level to Enterprise-sized business. Boosted consumer confidence with the Green Address Bar. Sectigo EV SSL includes a $1,750,000 warranty.
Sectigo SSL is available starting at $195 per year. Maximum of 1 year.
Summary:
- Green Address Bar – E-commerce recommended
- Increased conversion rates and reduced shopping cart abandonment
- 30-day cancellation period
- Mobile friendly
- Issuance takes up to one week
- Free reissues
- Extended Validation EV
- $1,750,000 warranty
- 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Sectigo Dynamic Site Seal
- SAN is not supported by Comodo
______________________________________________________________
• Thawte SSL123
Thawte SSL123 certificates are affordable and best for securing internal servers and private websites: high encryption levels and hassle-free validation. Thawte SSL123 includes a $500,000 warranty.
Thawte SSL123 is available starting at $70 per year. Maximum of 1 year.
Summary:
- 30-day cancellation period
- Mobile friendly
- Free unlimited licensing
- Fast issuance and they’re easy to install
- Free reissues
- Domain control validation DV
- Up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Dynamic Thawte Trusted Site Seal
———————————-
• Thawte SSL Webserver
Thawte SSL Webserver certificates are an affordable certificate that is business validated and best for business websites. High encryption levels for a small to mid-size business. Thawte SSL Webserver includes a $1,250,000 warranty.
Thawte SSL Webserver is available starting at $150 per year. Maximum of 1 year. SAN support coming soon [please contact us for more information/pricing]
Summary:
- 30-day cancellation period
- Mobile friendly
- Free unlimited licensing
- Issuance in a few days and they’re easy to install
- Free reissues
- Organisation validation OV
- Up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Dynamic Thawte Trusted Site Seal
———————————-
• Thawte Wildcard SSL
Thawte Wildcard certificates are affordable certificate that is business-validated – and secures unlimited subdomains under one certificate. High encryption levels for a small to mid-size business. Thawte Wildcard includes a $1,250,000 warranty.
Thawte Wildcard is available starting at $525 per year. Maximum of 1 year.
Summary:
- 30-day cancellation period
- Mobile friendly
- Free unlimited licensing
- Issuance in a few days and they’re easy to install
- Free reissues
- Organisation validation OV
- Up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Dynamic Thawte Trusted Site Seal
———————————-
• Thawte SSL Webserver EV
Thawte SSL Webserver EV certificates are issued via Extended Validation. Best for credit card transacting websites, banks, and financial institutions as the certificate includes the confidence displaying Green Address Bar in browsers along with Thawte’s Trusted Site Seal. Thawte SSL Webserver EV includes a $1,500,000 warranty.
Thawte SSL Webserver EV is available starting at $250 per year. Maximum of 1 year. SAN support is coming soon [please contact us for more information/pricing]. SAN can only be added to a new certificate order, and cannot be added to an existing issued certificate.
Summary:
- 30-day cancellation period
- Green Address Bar – E-commerce recommended
- Mobile friendly
- Free unlimited licensing
- Increased conversion rates and reduced shopping cart abandonment
- Free reissues
- Extended Validation EV
- Up to 256-bit encryption, 2048-bit root
- Compatible with 99% of all browsers
- Dynamic Thawte Trusted Site Seal
______________________________________________________________
• DigiCert Secure Site Pro
Digicert Secure Site Pro certificates are issued via Organisation Validation. Best for public websites for mid-size businesses. The certificate comes with the well-respected dynamic Norton Site Seal and includes vulnerability and malware scanning. Digicert Secure Site Pro includes a $2,000,000 warranty.
Digicert Secure Site Pro is available starting at $895 per year. Maximum of 1 year. SAN support is coming soon [please get in touch with us for more information/pricing]
Summary:
- 30-day cancellation period
- Dynamic Norton Site Seal
- Automatic daily malware and website vulnerability scanning
- Free unlimited licensing
- Increased conversion rates and reduced shopping cart abandonment
- Free reissues
- Organisation validation OV
- Guards against phishing with Elliptical Curve Cryptography, RSA, and DSA algorithms for the strongest encryption
- 40-bit to 256-bit security and encryption
- Compatible with 99% of all browsers
- Mobile friendly
———————————-
• Digicert Secure Site Pro EV
Digicert Secure Site Pro EV certificates are issued via Extended Validation which gives your customers proof that they can confidently transact with you. These certificates are highly recommended for e-commerce transactional websites as the certificate includes the confidence displaying Green Address Bar. On top of that, there’s the well-respected dynamic Norton Site Seal and daily vulnerability & malware scanning. Digicert Secure Site Pro EV includes a $2,000,000 warranty.
Digicert Secure Site Pro EV is available starting at $1200 per year. Maximum of 1 year. SAN support is coming soon [please get in touch with us for more information/pricing]
Summary:
- 30-day cancellation period
- Green Address Bar – E-commerce recommended
- Dynamic Norton Site Seal
- Automatic daily malware and website vulnerability scanning
- Free unlimited licensing
- Increased conversion rates and reduced shopping cart abandonment
- Free reissues
- Extended Validation EV
- Guards against phishing with Elliptical Curve Cryptography, RSA, and DSA algorithms for the strongest encryption
- 40-bit to 256-bit security and encryption
- Compatible with 99% of all browsers
- Mobile friendly
————————————————————————–
Servers, Browsers, And Clients Supported By GeoTrust Certificates
GeoTrust supports all current releases of commercial and freeware web servers supporting SSL v.3. Supported servers include:
Web Browsers (SSL enabled)
- Microsoft IE 5.01+
- Netscape Communicator 4.51+
- Mozilla Firefox 1.0+
- Mozilla Suite 1.0+
- Google Chrome
- AOL 5+
- Opera 7+
- Apple Safari 1.0+
- Red Hat Linux Konqueror
- Sony Playstation
- Microsoft WebTV
Micro Browsers (SSL enabled)
- Apple iOS
- Android 2.3+
- Netfront 3.0+
- Opera 7.0+
- Palm / Handspring Blazer 2.0+
- Microsoft Windows CE 2003
- Microsoft Internet Explorer Pocket PC 2003
- Microsoft Internet Explorer Smartphone 2003
- Blackberry 4.0+
- AT&T
- Sony Playstation Portable
- Sony Netjuke audio
- Brew
- NTT Do Co Mo
- Vodaphone
Email Clients (S/Mime)
- Microsoft Outlook 99+
- Netscape Communicator 4.51+
- Mozilla Thunderbird 1.0+
- Qualcomm Eudora 6.2+
- Lotus Notes
- Mulberry Email 3.1.6+
Application Clients and Servers
- Sun J2SE 1.4.2_02
- Sun J2EE 1.4.2_02
- IBM Web Sphere Micro Environment (WME)
- IBM Web Sphere Custom Environment (WCE)
Server Compatibility Of GeoTrust SSL Certificates
GeoTrust supports all current releases of commercial and freeware web servers and mail servers supporting SSL. Supported servers include:
Web Servers
- Apache + MOD SSL
- Apache + Raven
- Apache + Raven 1.5x
- Apache + SSLeay
- BEA WebLogic
- C2Net Stronghold
- Cobalt RaQ3/RaQ4 “Main Site”
- Cobalt RaQ3 “Virtual Site”
- Cobalt RaQ4 “Virtual Site”
- cPanel / WHM
- Ensim
- HSphere
- IBM HTTP
- iPlanet Enterprise Server 4.1
- Lotus Domino Go 4.6.2.6 and higher
- Lotus Domino 4.6 and higher
- Microsoft Internet Information Server 4.0
- Microsoft Internet Information Server 5.0 & 6.0
- Netscape Enterprise/Fast Track
- Novell ConsoleOne
- O’Reilly / Deerfield WebSite Professional 2.X / 3.X
- Plesk
- Stronghold 3
- Tomcat
- WebSTAR 4
- WebSTAR V
- Zeus Web Server v3
Mail Servers
- CPopper
- CPPop (cPanel mail server) and other stunnel based mail servers
- Courier IMAP
- Exchange 5 / 2000 / 2003 (Outlook Web Access)
- IPswitch IMAIL
- Postfix