What are the subtleties when buying an ssl certificate?

Question

Digital certificates

I plan to transfer my project to https, in connection with which the question arose of buying a certificate. What are the pitfalls when buying it? Where is the best place to take it? After a quick look, I was surprised that many give only for 90 days, that is, is it forced to renew once a quarter?

Answer 1

If you need Domain Validated, then do not invent extra expenses for yourself, use a certificate from LE, its renewal is automated and you can forget once you install it. Do not listen to the nonsense about "free will not be trusted", it is no different from other DV-certificates.

Answer 2

Here you can read about the types of certificates: https://ssl.ru/info/whats_the_ssl/index.html
If the site owner is an individual, then in most cases let'sEncrypt is enough - it's free

Answer 3

If for a personal project of an individual, take the free Let's Encrypt and don't bother. Or the simplest paid one, which usually costs $9-$25. Very often, when buying a domain, you can get it from many Western registrars for $1.99 or so.
These are all basic certificates with a variation of the domain name (moreover, one, and often only one version - with or without www). In the browser it will look like a green padlock. All other certificates, which are more expensive, include additional services - verification of not only a domain, but also a legal entity, the ability to use the same certificate for subdomains (wildcard), etc.

Answer 4

There are many subtleties.
One of the main questions is a physicist or a lawyer. The second - what kind of project, selling or not.
If it's just for a physicist, for a site that tells about the structure of the Universe, a free certificate will be enough, wherever you get it. He, of course, will not be trusted by many - but in this case it does not matter. When issuing, a simplified check is performed - it is enough to confirm the fact of domain ownership and it will confirm only the fact that the domain exists and that it belongs to you.
If the site is for a lawyer - when issuing a certificate there will be a more extended check, you will need to transfer copies of constituent documents, most likely there will be a return control call. The certificate will confirm not only the presence of a domain, but also the presence of an office and the fact that its name corresponds to that in the certificate. Extended verification provides even more guarantees, but it also costs more.
If the site is selling - do not listen to those who advise letsEncrypt / StartSSL - for the selling site it is better to kill the toad and buy a certificate from a normal registrar.
Somewhere in the January-February issue of the "System Administrator" there was an article "RUTSENTR: Getting a certificate in a recognized CA" about the intricacies of communicating with Geotrust and Comodo and in general about issuing certificates.