SSL FAQs

• What is SSL?
  
  
• How can I test InstantSSL?
  
  
• Why does an InstantSSL Certificate cost considerably less than other Certification Authorities?
  
  
• Where can I find out more about the validation, issuance and management process?
  
  
• Will InstantSSL Certificates work correctly with my customer's browsers?
  
  
• What is the difference between an InstantSSL, InstantSSL Pro and PremiumSSL Certificate available through instantssl.com?
  
  
• What does the Warranty actually mean?
  
  
• I want an increased Warranty on my InstantSSL Certificate - how can I get this?
  
  
• How long does it take to process my application?
  
  
• Why am I asked about VAT?
  
  
• Under what circumstances would you get 'Invalid VAT number details?
  
  
• Which versions of the SSL protocol is InstantSSL compatible with?
  
  
• Do Comodo SSL certificates only support 128 bit encryption?
  
  
• What is strong encryption?
  
  
• What is SGC?
  
  
• I am not a company, can I apply for a Certificate?
  
  
• When I generate a CSR what do I put in the Common Name field?
  
  
• I ordered my certificate but chose the wrong type of web server, do I need to re-apply?
  
  
• How can I learn the status of my application?
  
  
• I have made a mistake in my application
  
  
• Can I apply for a certificate for each sub-domain of the main domain?

Secure Sockets Layer, SSL, is the standard security technology for creating an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browser remain private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers. In order to be able to generate an SSL link, a web server requires an SSL Certificate. InstantSSL is such a Certificate, and when installed, can be used to create secure links to protect transactions, passwords, personal details, etc.

Click here to view a test page secured by InstantSSL, or if you would like to test InstantSSL on your system please feel free to try one of our fully functional Trial SSL Certificates.

InstantSSL has direct access to the IdAuthority, the largest commercial directory on the web. InstantSSL can therefore expediate the validation of an application. This efficient and highly effective validation method ensures we can issue a Certificate at a greatly reduced cost as reflected through our guaranteed lowest price in the industry as well as maintain a level of validation far superior to the methods employed by other SSL providers. In particular, the validation process employed to issue an InstantSSL, InstantSSL Pro or PremiumSSL Certificate is considerably more than just a domain name ownership check - we firmly believe this method alone to be insufficient to maintain the level of integrity in SSL that consumers have come to expect.

If you would like to compare our pricing to other providers, please read the CA Comparison Chart.

As a commercial Certificate Authority, Comodo (the company through which OmegaSphere certificates are issued) publish a Certification Practice Statement. This policy document is available here.

In order for your customer's browser to seamlessly use an InstantSSL Certificate, they must trust our 'Root Certificate'. Our Root (provided by Baltimore Technologies) is trusted by over 99% of all current browsers, comprising all Internet Explorer 5.00 and above, Netscape 4x and above and AOL 5 and above and comes pre-installed with all Windows 98SE, Windows ME, Windows 2000 and Windows XP operating systems. This browser compatibility makes InstantSSL as trusted as Verisign and Thawte.

We have outlined all the key differences in table format for your convenience - just click here to view.

In summary, InstantSSL Certificates are designed to secure intranets and transactions below $50. Our InstantSSL Pro and PremiumSSL Certificates are designed to secure all web servers. Whilst technically the three flavours of certificate are identical, due to the nature of how we intend the $49 InstantSSL Certificates to be used, they carry a reduced warranty ($50 maximum warranty). This reduced warranty enable us to further reduce the cost of the certificate to you. However, InstantSSL Pro Certificates carry a warranty of $2500 and PremiumSSL Certificates carry a greatly increased warranty of $10,000 for your total peace of mind and also include a free TrustLogo worth $119 and unlimited US toll free technical support.

We believe it is important to protect the end user. If we were to mis-issue a certificate to a fraudulent site, and that fraudulent site has an SSL link with an end user and as a result of this the end user loses money. The end user had what they thought was a "trusted session". Comodo (the company through which OmegaSphere certificates are issued) should never have provided the fraudster with the ability to engineer this situation. Hence, we have taken out insurance to pay out money to the end user. How can we do this?

1. We value the end customer
2. We believe the insurance provided greater peace of mind hence allows the merchant to sell more products
3. Most importantly, we value our validation techniques (delivered through www.idauthority.com)

We pre-validate customers and provide validation that is far higher than the majority of other SSL providers. Some CA's have very weak validation hence they decide NOT to offer insurance! Finally, it is worth pointing out, that we offer high validation, but not at the compromise of speed. You can still obtain SSL instantly.

If you require an increased warranty on your SSL Certificate, choose from the InstantSSL Pro or PremiumSSL Certificates option. This provides a greatly increased warranty of $2500 and $10,000 respectively.

Provided we have sufficient validation information available through the IdAuthority (as described in our CPS), your InstantSSL, InstantSSL Pro or PremiumSSL can be issued in only minutes. If additional verification processes must be used to validate your application, the issuance process may take slightly longer. In such cases we guarantee that the Certificate is issued within 2 working days. Please contact Comodo directly to expedite your Order should it be urgent.

Comodo, the organisation behind our InstantSSL, is a UK Company. They must therefore determine if they are to charge VAT (Value Added Tax) on the advertised price of the sale. Only UK companies and EU companies without a valid VAT number will be charged VAT. If you are outside of the EU be sure to choose "Outside EU" in the VAT options in the application pages to avoid being charged VAT.

A value is entered in the VAT number field, but 'Non-EU is selected.

InstantSSL is compatible with any browsers and webservers using SSL version 3 - the de facto SSL implementation. SSL version 1 and version 2 have been superseded by version 3 for a number of years, mainly due to the inherent security flaws found in these old versions. All web browsers developed after Internet Explorer 3 and Netscape 3 use SSL version 3 (however still support older SSL protocol versions). If your webserver is only capable of supporting versions 1 and 2 of the SSL protocol we strongly recommend you contact your webserver software vendor for an update - these protocols are flawed. For more details on why SSL version 2 is no longer used can be found here:
http://www.eucybervote.org/Reports/MSI-WP2-D7V1-V1.0-02.htm

No, they support the key size as determined by the web server or browser, if the web server or browser can only negotiate 40 or 56bit then this is session that is established

This is another term for 128 bit encryption. All InstantSSL certificates are strong encryption.

SGC is Server Gated Cryptography. This does have the ability to up rate a weak browser to a stronger (128bit) browser without the need to upgrade. It was introduced at a time that the US encryption export laws were stringent. SGC Certificates rely on the webserver software being able to handle SGC. Comodo does not at this time issue SGC certificates.

Yes, anyone wishing to provide a confidential and secure link between server and customer's browser can apply for a certificate

The Common Name field contains the domain or server name. Do not include http:// or https:// before the name or any subfolders indicated by the / after the domain name

The web server details are for our records and support purposes only. The certificates are the same format irrelevant of the web server chosen.

Contact support at support@comodogroup.com with your order number and a member of the issuance team will be happy to update you

If you have already submitted your application please contact support@comodogroup.com quoting your Order Number and details of the mistake. In some cases you may need to submit a replacement CSR.

Yes, but it can be simpler and more cost effective to use a Wildcard certificate which protects all sub-domains below the primary named domain. For more information please contact