SSL verification relies on the older Secure Socket Layer and the newer Transport Security Layer protocols to secure the safety of online transactions. An SSL digital certificate provides your online business transaction with security from theft or fraud.

Businesses will create an SSL certificate to encrypt sensitive data during online transactions. SSL digital certificate verification protects credit card transactions, vital personal ID records and confidential corporate information shared online between offices. SSL verification involves three phases:

1. Peer negotiation, or handshaking between computers to open a secure transaction

2. A digital key exchange to provide SSL certificate verification

3. Encryption which can only be decoded with the digital key

Action Steps
The best contacts and resources to help you get it done

Investigate your site security capabilities and needs of SSL certificates

The nature of your business will dictate the amount of security you need. You need to determine if your transactions are highly sensitive and whether or not you conduct a high volume of online business and communication.

I recommend: Small businesses might generate SSL certificates for short-term transactions using free trial options. Most have a limited duration and expire after 90 days. Both VeriSign and Comodo offer trial certificates. VeriSign also offers a Customer Trust Test to help you determine your business’ online security needs.

Maximize security with vendors who specialize in SSL Security and buy SSL certificates

Businesses that conduct a large volume of online transactions, or who deal in highly sensitive information that includes corporate secrets or personal identity records will want to purchase SSL certificates from Vendors who deal exclusively with online security.

I recommend: VeriSign controls the largest market share of SSL digital certificates, offering a wide-range of high end and comprehensive alternatives. GeoTrust’s Enterprise SSL offers multi-license and load-balancing options for businesses that issue a large volume of SSL certificates. DigiCert’s PKI Manager system allows you to manage multiple SSL certificates (which includes instantly creating SSL certificates) on hundreds of servers from any browser.

Create SSL certificate capabilities with a web domain or ecommerce bundle

Smaller businesses with a limited web presence don't need expensive security options. Their domain manager or ecommerce provider can issue SSL certificates at a very low price. Of course, they also tend to be less secure but if your transactions are less sensitive, domain provider certificates may be perfect for your operation.

I recommend: GoDaddy and Network solutions both offer SSL certificates with their other web hosting services. Authorize.Net specializes in managing ecommerce transactions and allows vendors to purchase SSL certificates as part of the merchant services.

Tips & Tactics

Helpful advice for making the most of this Guide

• •  You can create SSL certificates across multiple domains using Wildcard certificates. However, wildcard certificates tend to be less secure than single server certificates and vendors may restrict the amount of insurance available for transactions.