Tag Archives: free SSL

Why Use a Paid Wildcard SSL Certificate Instead of Free Wildcard SSL?

2 votes, average: 5.00 out of 52 votes, average: 5.00 out of 52 votes, average: 5.00 out of 52 votes, average: 5.00 out of 52 votes, average: 5.00 out of 5 (2 votes, average: 5.00 out of 5, rated)
Loading...

Although free wildcard SSL certificates are enticing, they lack the features paid wildcard SSL certificates offer

In today’s business world, having an SSL certificate on your site is no longer an option. It has become a standard that even big companies like Google are pushing, marking all HTTP sites as “not secure” starting as of 2018. And Google’s likely not the only one who’s pushing the switch — it should come as no surprise that other browsers, governmental bodies, and even customers themselves will soon expect all sites to be HTTPS given the security loopholes found within HTTP. This is why some people turn to free wildcard SSL certificates and single domain certificates.

Organizations such as Let’s Encrypt have made access to SSL certificates easier than ever. They offer free SSL certificates to anyone who wants to secure their websites but doesn’t want to spend any money on doing so. They offer basic domain validation (DV) certificates for single domains and wildcard SSL certificates as well. However, there are a few caveats when comparing free wildcard SSL certificates with paid wildcard SSL certificates that are worth mentioning, as they can cause headaches down the line. We’ll get into those more in a bit.

Before we dive into the differences between paid and free wildcard SSL certificates, let’s talk about what a wildcard SSL certificate is and why your business might need one.

What’s a Wildcard SSL Certificate?

A wildcard SSL certificate is an SSL certificate that covers a single domain as well as unlimited subdomains (*.domain.com, where the asterisk (*) is the subdomain) on a single level. That means that you can have both mail.domain.com and shop.domain.com under a single certificate, for example.

Wildcard SSL certificates save you both the headache of having tons of certificates to manage (if you have many subdomains) and the associated costs of having an individual SSL certificate for each subdomain.

Not only this, but wildcard SSL certificates also cover your main domain (domain.com), so you won’t need to get any other SSL certificates — a single wildcard SSL certificate will have you covered.

As for validation levels, this is the only place where wildcard SSL certificates fall short. Unlike regular SSL certificates, wildcard SSL certificates are only offered in domain validation or organization validation (OV) levels, but not extended validation (EV). This is because the CA/B Forum expressly prohibits EV wildcards from being issued.

Now that you understand what a wildcard SSL certificate is, let’s take a look at the differences between paid and free wildcard SSL certificates.

Paid vs Free Wildcard SSL Certificates — An In-Depth Comparison

When it comes to paid and free wildcard SSL certificates, the truth is that they both offer the same core benefit: they both facilitate the encryption of the connection between your client (the end user’s browser) and your server (your website) to secure data in transit. However, that doesn’t mean you should go and get the free wildcard SSL certificate without first taking a look at the other benefits a paid wildcard SSL certificate affords. That would be like ordering the cheapest dessert at the restaurant without knowing whether you’ll really like it, what the other options are, or if there’s something else you might prefer.

The first problem with free wildcard SSL certificates is that they offer no warranty or support. That means that if for any reason your free wildcard SSL certificate stops working, there won’t be anyone who you can rely on to fix your website. Your only solution would be to turn to public forums, which aren’t very reliable (or helpful). Paid wildcard SSL certificates, such as the RapidSSLOnline wildcard SSL certificates lineup, offer 24/7 support and warranties ranging up to $1.5 million in the event that anything goes wrong with the SSL certificates or encryption — which means that you’ll always be covered.

Not only this, but paid wildcard SSL certificates also offer higher validation levels than free wildcard SSL certificates. This makes your site’s visitors feel at ease as a result of the added identity that OV validation asserts on your site as well as the site seals that are included with a paid wildcard SSL certificate.

One example of a paid wildcard SSL certificate is the GeoTrust® True BusinessID® Wildcard (OV) certificate, which comes with 24/7 support, a $1.2 million warranty, and organizational validation..

Save Up to 71% on Wildcard SSL Certificates

Securing all of your single level subdomains doesn’t have to cost you an arm and a leg. Get Wildcard SSL certificates starting for as little as $118.36 per year!

Shop Wildcard Certificates

However, we understand that your desired warranty coverage and validation levels may differ from others. This is why we’ve put together a chart showing the three most popular options when it comes to wildcard SSL certificates — both free and paid.

COMPARISON LET’S ENCRYPT FREE WILDCARD RapidSSL® Wildcard Certificate (DV) GeoTrust® True BusinessID® Wildcard
Brand ISRG Comodo GeoTrust
Validation Type Domain Validation Domain Validation Organization Validation
Site Seal None
Subdomains Secured Unlimited Unlimited Unlimited
Server Licenses Not Applicable Unlimited Unlimited
Re-Issuance Manual Unlimited Unlimited
Issuance Times <1 hour Minutes 1-3 days
Encryption Strength 256 bit 256 bit 256 bit
Browser Compatibility 99.9% 99.9% 99.9%
Warranty None $10,000 $1,250,000
Wildcard Support Yes (unlimited subdomains) Yes (unlimited subdomains) Yes (unlimited subdomains)
Price Free Starting at $118.36/year Starting at $359.40/year
Buy Now   [Buy Now] [Buy Now]

 

Which Wildcard SSL Certificate Should I Choose?

Now that we’ve discussed why a wildcard SSL certificate might benefit you — as well as the differences between free and paid wildcard SSL certificates — it’s time to make a choice. For the free wildcard SSL certificate, being free is where the benefits end. If you want access to 24/7 support, warranties, or site seals, you’ll have to go with a paid wildcard SSL certificate. One such example is the RapidSSL® Wildcard Certificate (DV), which offers all the benefits of a paid wildcard SSL certificate without breaking the bank.

Free SSL vs Paid SSL

3 votes, average: 5.00 out of 53 votes, average: 5.00 out of 53 votes, average: 5.00 out of 53 votes, average: 5.00 out of 53 votes, average: 5.00 out of 5 (3 votes, average: 5.00 out of 5, rated)
Loading...

The difference between free SSL and paid SSL, and why it matters

Ah, the free SSL vs paid SSL question. Since you’re here, it likely means you’ve likely heard about free SSL and may wonder if SSL is free, why would you pay for it? And let us respond to that question by posing one of our own: Email is free, too. So why aren’t you emailing all your partners and customers from a Gmail address?

Because it looks bad for your company. Likewise, using a free SSL certificate is a great way to advertise the fact that you have done the bare minimum to secure the connections on your website. That’s bush league.

But, beyond that, there are other more technical reasons to eschew free SSL. Let’s go through a few of them to determine the difference between free SSL and paid SSL, and why one is better than the other.

Downfalls of Using a Free SSL Instead of Commercial Paid SSL

Free vs Paid SSL: Shorter Certificate Lifespans

If you’re using Let’s Encrypt’s free SSL, you’re using certificates with 90-day lifespans. That might not seem like a big deal because it’s automated, but it adds an additional layer of complexity and means you’re now dealing with four or eight certificates over the same period instead of just one or two.

With paid SSL, it’s nice not to have to constantly keep tabs on your SSL certificates. Even if you’re using ACME, you still need to check regularly to make sure everything is still working like it should with these short-term, free certificates. And when it doesn’t — get ready for a headache.

Save Up to 82% on DV SSL Certificates

Give your website the protection it deserves with a Domain Validation (DV) Organization Validation (OV), or Extensive Validation (EV) SSL Certificate.

Get a DV SSL certificate, starting at $12.42/year

Free vs Paid SSL: The Struggle of Certificate Management is Amplified

One of the benefits of using commercial SSL certificates is that they play nicely with just about any certificate management platform. That’s because it behooves the CAs to make certificates easily discoverable so they can be added to your management platform to ensure no interruptions or unforeseen issues as you’re securing your digital infrastructure.

Let’s Encrypt, on the other hand, is like honeybadger — it doesn’t give a s#^! about that. Let’s Encrypt is running a skeleton crew on a crowdsourced, shoestring budget. They’re just trying to keep the doors open.

Free vs Paid SSL: No Customer Support

If you think we’re being jerks now, just wait until something breaks. You’ll have to go sifting through a bunch of old forum posts written by… well, you know what IT guys are like. There’s no phone number, there’s no live chat or ticketing system. There’s only forums and message boards where, hopefully, someone else has solved whatever issue you’re having and has then documented it for you. Maybe they’ll even be polite… No, no, they won’t.

Free vs Paid SSL: No Options

Vanilla ice cream is great, but rarely would anyone be content to eat it every day. This is absolutely nothing like that, except for the fact Let’s Encrypt and other free certificate authorities (CAs) only issue one type of certificate: single-domain validated (DV) certificates, the vanilla of the SSL varieties. Yes, Let’s Encrypt advertises a wildcard, but you need to meet extremely specific conditions (like using the right server, the proper configuration, and having the correct blood type) before they’ll even consider issuing one.

There is no purity test with commercial CAs. You can pick single-domain certificates, multi-domain certificates, wildcards — even a crazy variant called multi-domain wildcards. And you can get them at multiple validation levels, too. Some, such as the extended validation (EV) SSL certificates, even grant your website special browser treatment. That’s some Baskin-Robbins level stuff you just don’t get with free SSL.

Free vs Paid SSL: No Website Identity

As we just covered, you can only get DV SSL from free CAs. That means the certificate only identifies your server. Unfortunately, though, most people don’t know companies by their server identity. So, that’s of limited value. Commercial CAs sell OV and EV certificates that assert actual organizational identity. This can help protect your customers and employees from phishing and also makes a strong opening statement about your brand.

Free vs Paid SSL: No Warranties

Free SSL is fantastic if you’re not a business or aren’t concerned about validating your business beyond the basic domain level. What many people don’t realize is that free SSL certificates don’t have warranties. Only commercial CAs offer warranties on their products. You are more indemnified with a paid SSL certificate than a free one.

There shouldn’t be an economic barrier to encryption for the masses. But you ARE a business. The whole economic barrier doesn’t apply to you because you’re making money. And, as such, you can afford to actually invest in your website’s security instead of just slapping 90-day bandaids on it.

So, the ball is in your court. Put your best foot forward with a premium SSL certificate or just do the bare minimum. It’s only the success of your business that hangs in the balance.

See the RapidSSL™ Difference

Want to try our FreeSSL™ free trial? This free trial certificate will allow you to use and test a RapidSSL® certificate before buying it.

Ready to buy?

Save Up to 82% on DV SSL Certificates

Protect a website in a few minutes with a Domain Validated SSL Certificate (DV SSL).

Get a DV SSL certificate, starting at $12.42/year