Frequently asked questions
Everything you need to know about SSL from 123-reg
SSL basics
What is SSL?
SSL encrypts information sent between your website and a visitor's web browser so that it cannot be read as it is sent across the internet.
SSL stands for secure sockets layer (you never know, it might come up in a quiz sometime), and it's most commonly used when websites request sensitive information from a visitor, like a password or credit card number.
If you've ever bought anything online, you've probably used SSL without realising it. Most web browsers display a padlock when you're viewing a site over SSL, so you know the connection is secure.
The address of pages viewed over SSL also normally starts https://, instead of http://.
When you buy SSL, you're actually buying an SSL certificate. This is issued by a trusted authority and identifies your site or business. You can then install this onto your domain name in order to encrypt pages on your website.
What can I use SSL for?
You can use our SSL certificates to secure any website you run. But people usually use them to protect ecommerce sites, or in situations where their website is exchanging sensitive information. For instance:
- Entering credit card details
- Logging in with a username and password
- Viewing or sending emails
- Downloading a customer database
- Online banking or sharing financial details
- Private chat rooms
You can use our SSL certificates in two ways:
- With domains you host and manage through 123-reg.
(Our SSL certificates do not currently work with the InstantSite, and our Ecommerce service already comes with an SSL certificate so you can't add another one.) - As standalone certificates.
You can install your SSL certificates whereever you like - even on other hosting services. We'll explain exactly how to set everything up when you buy the certificate.
Does SSL work with all web browsers?
All our SSL certificates work with the vast majority of web browsers, including Internet Explorer, Firefox, Opera, Google Chrome and Safari.
The proportion of people using browsers which aren't compatible with our SSL certificates is tiny - around 1% - and as our certificates comply with industry standards, you'll encounter this problem with any SSL certificate provider.
What SSL certificate do I need?
Everyone's different, so we can't make an exact recommendation. But having said that, do you fit any of these categories? If so, check out the option we've recommended:
- I've just started a new hobby website
If your site is pretty new and you're not running a business, our basic SSL package, 123-SSL, could be what you need. It gives you essential security and encryption, although there's no underwritten warranty and you can't display the highly-recognisable GlobalSign badge.
- I've recently launched my own online business
For any commercial enterprise, we recommend one of the options that let you display the GlobalSign seal. This is instantly recognisable to your visitors and offers real reassurance. For a new business, Domain SSL probably strikes the right balance between price and features.
- My business site is well-established, busy and growing
Ok, you'l probably be wanting our Organisational SSL - or for the highest level of checks on your identity, Extended SSL. Both are really secure, but Extended SSL adds the green bar to your site. That's ideal if you want to offer extra reassurance to your visitors.
- I want the best security I can get for my site
There's only one choice: Extended SSL. The vetting process for this SSL certificate is comprehensive, and it gives your visitors greater confidence through the green browser bar. This is our top of the range SSL certificate. It's packed with features to keep your site secure, and you're covered by a big warranty too.
- I need to protect lots of subdomains
Make sure you choose an SSL certificate offering wildcard SSL as an option - and remember to select that option when you buy. This lets you secure as many subdomains as you want, rather than having to buy a separate certificate for each one.
- I have more than one server to secure
In that case, you'll probably want to go for our Domain, Organisational or Extended SSL certificates. These include 3 server licences, so you can cover 3 servers with a single certificate.
What does the warranty cover?
Our Domain, Organisational and Extended SSL certificates include a warranty. This covers you and visitors to your website for losses caused by the certificate being mis-issued.
The warranty is provided by GlobalSign, the authority which issues these certificates, and underwritten by an insurance company. So you can have complete confidence.
What is the green browser bar?
The green browser bar is a new feature available in recent web browsers. In addition to displaying the secure padlock, these browsers display a green bar next to the website address when on certain secure sites.
The green browser bar offers an extra level of protection for a few reasons:
- It's only available to businesses which have completed extra vetting steps. In order to use the green browser bar, businesses have to pass more stringent vetting.
- It displays your business name and location. This gives visitors to your site immediate visibility of who you are, and makes it hard for other sites passing themselves off as you.
- It's very visible and obvious. The green bar is positioned right at the top of a browser window, not down at the bottom. And it's bright green. So people can see instantly when they're on a secure site.
In order to get the green browser bar for your site, you need to purchase our Extended SSL certificate.
What domain names can I use SSL with?
You can attach your SSL certificate to any domain name managed through 123-reg. Or you can purchase a standalone SSL certificate and install it elsewhere.
Please note that these SSL certificates are not currently compatible with our InstantSite and Ecommerce packages. (Ecommerce already comes with an SSL certificate, so you can't add another one.)
What is the site seal for?
When you buy a 123-reg SSL certificate, you can use one of the site seals on your website. These instantly-recognisable badges confirm to visitors that you're protected by a secure SSL certificate. And when they click on the site seal, they'll be able to view more information about your site's identity.
123-SSL comes with a basic 123-reg site seal. For extra brand awareness, you can use the GlobalSign site seal with our Domain, Organisational and Extended SSL certificates. GlobalSign is a leading SSL provider - so their site seal offers your visitors increased confidence.
Buying SSL
Is it easy to buy SSL?
Basically, yes. Just choose which option you want and hit the buy button. We'll walk you through the process and explain what you need to do.
The process is a little different depending how you're going to use your certificate.
If you want to buy it with a domain name, we'll take you through our normal order process so you can find the domain and add the SSL certificate to it.
Standalone certificates must be purchased through your 123-reg control panel. This means you should sign up to get a 123-reg account (if you don't already have one), then log in to our site to place an order through your control panel.
What is CSR and AutoCSR?
Traditionally, in order to purchase an SSL certificate you'd have had to supply a certificate signing request (CSR). This is a file containing important information about your SSL certificate.
Creating a CSR can be a little tricky, so most of our SSL certificates come with AutoCSR, which does it all for you. No problem! Alternatively, if you need help creating your own CSR, please see the information on our support site.
What is the vetting procedure?
When you buy an SSL certificate, the issuing authority will perform some checks on you or your business to verify your identity.
This step is important as it's only by ensuring SSL certificates are issued correctly that the security of the system can be guaranteed.
The vetting procedure is generally straightforward and can often be completed without you supplying any further information.
However, occasionally you might need to send some extra details over to the issuing authority. If this is the case, they'll email or contact you by telephone as part of the vetting process.
Please note that you'll receive an approver email from GlobalSign (the issuing authority) - this will be sent to the email address you enter during the order process. You'll need to click a link in this email to proceed with the vetting process.