Thawte SSL Web Server Certificates with EV
Establishes Trust And Security At A Glance

Overview:

The stringent identity verification process that, as a matter of best practice, is required to issue SSL certificates, is expensive for CAs to maintain. As a result, SSL certificates originally carried a price that reflected the quality of that verification process. Some SSL customers, pressured CAs for a lower-cost product and many CAs responded by offering "domain validation only" certificates. These lower-priced certificates only verify the domain name to which they are issued, and do not include more extensive identity validation of the domain's owner company. While less expensive, these SSL certificates also provide less assurance to the end user. These certificates are often ideal for low-security applications, when the stronger validation required to issue a traditional SSL certificate is not necessary.

Eventually, end users became confused about the differences between SSL certificates and began demanding a way to distinguish between these less-expensive certificates and certificates that provide greater identity verification and assurance. In response, the CA/Browser Forum, an independent industry group, produced guidelines for an Extended Validation (EV) certificate.

An EV certificate is an SSL certificate where the issuing CA must take more rigorous steps to validate the identity of the certificate requestor. CAs must also pass an independent audit of their validation procedures in order to continue offering EV certificates, meaning EV certificates tend to only be available from top-tier, highly-trusted CAs, such as Thawte.

Thawte® SSL Web Server Certificates with EV enable the most visible security indicator: the green address bar in high-security browsers, assuring users that your site is secure and your identity has been authenticated to the industry's highest standard. When customers see the green address bar and the Thawte® Trusted Site Seal, they gain the confidence to complete their transaction. SSL Web Server Certificates with EV include Extended Validation, the Thawte Trusted Site Seal, free reissues, and a 30-day money back guarantee.

Visual cues associated with an EV certificate.

Gaining information from an EV certificate.

Note: Thawte SSL Web Server Certificate with EV is a chained SSL certificate and your web server must support certificate chaining.

Features:

• Increase revenue potential and reduce fraud with the green address bar and the Thawte Trusted Site Seal, which is available in 18 languages.
• Protect confidential information exchanged during shopping, banking, secure sign in, and account self-service interactions with up to 256-bit SSL encryption and a 750k USD warranty.
• Buy, renew, and manage certificates with a single, secure sign-in to Thawte® Certificate Center.
• Secure your competitive advantage with SSL from Thawte, a globally recognized certificate authority with root certificates included in over 99% of browsers.
• Save time and money by purchasing multi-year SSL certificates and additional licenses when securing multiple servers for a single domain (co-location, clustering, load balancing servers, etc.).
• Add up to four additional domain names to one certificate when you purchase a SAN Certificate with a Thawte SSL Certificate.

Choosing a Certificate:

The right SSL certificate depends on the level of assurance your customers need and the minimum security level your organization requires.

Assurance and Authentication

Authentication means that a trusted third party (such as Thawte) has verified the identification information contained in your SSL certificate, assuring customers that your site is actually your site.

You are considering: SSL Web Server Certificates with EV to provide the most assurance to users. Extended Validation (EV) turns the address bar green in high-security browsers, showing that your organization has met the industry's highest standard of authentication.

³Most Assurance

Security and Encryption

Encryption is the "secret code" used to keep online communications private when a web browser and web server talk to each other.

You are considering: SSL Web Server Certificates with EV with 128-bit or 256-bit encryption in the latest operating systems and web browsers. However, certain older browsers and operating systems only connect at 40-bit or 56-bit.

For strong encryption in the most browsers, SGC SuperCerts with server-gated cryptography (SGC) enable older browsers and operating systems to step up to 128-bit or 256-bit encryption.

²More encryption ³Strong encryption

If you need both Extended Validation and SGC, consider a VeriSign Secure Site Pro with EV SSL Certificate.

Product Comparision:

When online customers feel secure, they are more likely to complete a purchase or personalize their profile and return to your web site. What inspires confidence online? An SSL certificate from a globally recognized certificate authority such as Thawte. Expert multilingual support, a robust authentication process, and easy online management make Thawte® SSL Certificates the best value for securing your site.

SSL Certificates Comparision:
	SSL123 Certificates	SSL Web Server Certificates	SSL Web Server Certificates with EV	SGC SuperCerts	Wildcard SSL Certificates
Green Address Bar
Authentication Level	Domain validation	Full organization validation	Extended Validation (EV)	Full organization validation	Full organization validation
SSL encryption	128-bit to 256-bit in most browsers	128-bit to 256-bit in most browsers	128-bit to 256-bit in most browsers	128-bit to 256-bit in 99.9% of browsers	128-bit to 256-bit in most browsers
Estimated issuance time	1 Business Day, or Less	1-2 Business Days	1-10 Business Days	1-2 Business Days	1-2 Business Days
Thawte® Site Seal
Recommended use	Secure intranets and internal servers	Secure log-ins for public and employee sites	Visually establish trust and security for all users	Enable strong encryption for the most site users	Secure multiple subdomains
Domains secured	Single	Single	Single	Single	Unlimited subdomains
Certificate Center Account
Free reissue
Renewal reminders
Over 99% browser compatibility
EV Upgrader™
Root hierarchy	Thawte	Thawte	Thawte EV	Thawte	Thawte
OCSP and CRL Support
Internationalized Domain Names
Money back guarantee

Documentation:

Download the Thawte Gain a New Level of Trust: EV SSL Certs Guide  (PDF).

Download the Thawte Understanding SSL Certificates Guide  (PDF).