Validation level means which validations the certificate authority do during the order process before the certificate is issued. In short, the higher the validation level the more trust the user can in the authenticity and identity of the certificate.
The lowest level Domain Validation is suitable to persons. At domain validation the issuer determine that the applicant have access to the domain.The next level of validation Organization Validation is suitable for companies and organizations. The issuer will do the same validation as for domain validation but also ascertain the applicant is part a registered company or organization and that they personally approve of the application. Extended Validation is currently the highest validation level. It will in most browser give the green address bar. This level is mostly used by banks, financial institutions, web shops, or web sites that handle credit card information or similar economic details.
CA's use a pre-approved WHOIS address to send a domain validation email.In this email there is usually a link the applicant has to click to verify the domain. Other options include creating a DNS record or publicly available file with a generated hash.
By using wildcard certificates one can use any name for a domain.
*.certezza.net would for example be valid for the both www.certezza.net and webmail.certezza.net, but not for sub.www.certezza.net
NOTE! It is for security reasons not recommended to use wildcard unless necessary, instead using SAN for ordinary certificates.
Unlike wildcards, SAN can be added for specific subdomains.
Please note that if SAN are included in the CSR, the price for the order will be adjusted at the final step.
It is recommended to add all SAN manually for the order, rather then to have them in the CSR.
It is not necessary to add CN to SAN list, it will be added automatically.
Some CAs license their certificates per server, which mean that if the certificate will be used on multiple server, additional licenses need to be purchased.
Thawte, GeoTrust and Globalsign allow the certificate to be installed on unlimited number of servers and no additional licenses are needed.
Included in the price for the above selected product, it is included consultation regarding purchase and installation.
