Why Your Website Needs SSL and How to Choose One
Even if you've registered a beautiful domain and created a great website, the job isn't done yet. Your customers may ask how secure your site is and whether it's safe to leave their data there. To answer this question, install a security feature on your website.SSL certificate.
What is an SSL certificate? First, let's define the acronym SSL, which stands for Secure Sockets Layer. It's a cryptographic protocol that guarantees a secure connection between the user's browser and the server.
Every year, information encryption is becoming increasingly important. In 2017, Google announced that website security would impact their ranking in search results. Sites that use HTTP are marked as "not secure" in browsers. Without SSL, you won't be able to accept credit card payments on your site. If your site contains any data entry forms, such as email, it needs to be secured. And these are just a few of the reasons to install a certificate!
In this article, we'll help you choose an SSL certificate and explain their main differences.
Our website offers four main types of SSL certificates: domain validation, subdomain protection, green bar, and free certificates, which are included with NIC.UA hosting. All certificates use 128- or 256-bit encryption to generate the encryption key, ensuring reliable protection of your data from interception and theft.
If your website doesn't have subdomains, you can order a single domain-validated certificate—Positive SSL or Comodo SSL. They differ in the amount of guarantee. However, to protect subdomains, you must also install Wildcard.
Please note!Wildcard only protects subdomains, not the website's main domain. When activating a Wildcard certificate in the CSR, be sure to include an asterisk * in the "Domain" field: *.domain.com. Otherwise, activation will fail.
An Extended Validation certificate not only verifies the domain but also the identity of the company that owns the domain. The name, phone numbers, and even the name of the company owner are verified, and only then is the certificate issued. This type of SSL can be identified by the green bar indicating the company name and the lock icon in the browser's address bar.
Unlike these certificates, a free SSL doesn't verify the domain or company data, but merely encrypts the data. This certificate is called "Let's Encrypt." It is available with NIC.UA hosting.
Let's Encrypt— a certification center that provides free cryptographic certificatesTLS-encryption (HTTPS).
Unlike paid certificates,Let's EncryptIt must be renewed every 2.5-3 months. We can only provide it for hosting accounts with no more than 100 domains and subdomains. This certificate cannot be obtained with domain verification, organization verification, or with a green bar. It alsodoes not provide financial guarantees, whereas if paid certificates are hacked, you will receive compensation.
To receive a free certificate, write to us atsupport@nic.ua, enter your hosting login and PIN code for the support service (located in "Summary information» personal account).
Certificates will be generated for all domains and subdomains of your hosting account within 24 hours.
How to switch to HTTPS
After generating the certificate, migrate your site to the new protocol. Keep in mind that incorrectly configured redirects can harm your site's search engine rankings—be sure to consult an SEO specialist! Typically, you should proceed as follows:
- Change the site protocol from http to https in your CMS settings in the admin panel.
- Make a permanent redirect (301) or temporary redirect (302) withhttp://example.com.uaonhttps://example.com.uaTo do this, go to the "Redirects" menu in cPanel or configure the .htaccess file. Pay attention to your CMS settings to avoid creating a redirect loop.
If something doesn't work or is unclear, write to ourcustomer support, we will definitely help :)
