SSL certificate: the advantages
If an SSL certificate has been issued for a domain, the website can be accessed via an encrypted connection (with the https:// protocol). This is indicated in the browser by a closed lock symbol. The website visitor can then be sure that the data cannot be read or intercepted by third parties. The certificate ensures greater trust in the website and the provider.
Google has published a blog post that an SSL certificate has a positive effect on rankings in search results. This effect could increase in the future. Already today, websites with an SSL certificate are marked in the search results with a https:// in front of the address.
In future, websites without encryption will be displayed in Chromeand Firefox browsers will initially be marked as dubious and later as insecure.
The future HTTP/2 protocol will only work in conjunction with encryption. Likewise Apps for iOS9 and higherthat communicate with websites, for example, must use the HTTPS protocol (App Transport Security). Something similar is planned for Android.
Inexpensive security
An SSL certificate is available from us for as little as 36 euros/year (DomainSSL with domain validation). This certificate is sufficient for most websites and is significantly cheaper than with many other providers. There are no set-up costs. All types of SSL certificates and prices can be found in our price list.
SSL certificates can be ordered and managed in the customer menu under "Order/SSL certificates".
Alternatively, you can order via our forms:
If you have any questions, simply contact our support team, we will be happy to help.
Use of SSL with TYPO3
If an SSL certificate has been issued for a domain, the entire website should be converted to encrypted transmission. This is usually done in just a few steps:
- Set the parameter lockSSL in the TYPO3 Installtool in the All Configuration area to the value 2. This will redirect unencrypted calls to the backend to the encrypted version.
- Adaptation of the TypoScript parameter config.baseURL to https (instead of http).
- Adaptation of the .htaccess file in the start directory to redirect all unencrypted website calls to the encrypted version.
- For domains with external registration: Entry of the IP address of the SSL certificate in the A-record of the domain (with and without www). For all domains registered through us, the entry is made automatically.
- Make sure that externally integrated files (JavaScripts such as jQuery, web fonts etc.) are integrated via https. You may need to make corrections in the TypoScript setup or constants. This is explained in the following video from 6:49 onwards.
We also explain the necessary steps in the following video instructions:
DomainSSL certificate
Our recommendation and the certificate for most users: this certificate is issued for exactly one domain or subdomain. So for www.domain.tld or store.domain.tld or forum.domain.tld.
There is no difference between an order with or without www. in front of the domain name. The certificates are valid for both variants.
The domain SSL certificate can usually be issued and used within a few minutes.
DomainSSL wildcard certificate
The wildcard certificate is valid for one domain and all subdomains of this domain. If you need certificates for more than 4 subdomains, this variant is cheaper. This is particularly practical if you also operate development, test or staging versions of a website under one subdomain each.
Organization SSL
This certificate is issued to both the domain and the owner. When the certificate is checked in the browser, the owner data is also displayed.
This certificate is available either for a domain or subdomain or as a wildcard certificate for a domain including all subdomains.
It usually takes 1-2 working days to issue the certificate.
Extended SSL (EV)
This is a certificate with the highest level of trust. There is an extended validation of the owner, for example by checking the extract from the commercial register and contacting the owner.
In the browser, this is no longer indicated by a green notice with the owner's name in the URL bar. This function has been removed by the browser manufacturers. Website visitors can only see this information if they click on the lock symbol in front of the URL. The company for which the certificate was issued is then displayed there.
Due to the additional verification, usually by an e-mail or a phone call from an employee of the certificate issuer, it usually takes 5-10 working days to issue the certificate.
Background: TLS (SSL) encryption
With the Transport Layer Security (TLS, formerly Secure Socket Layer, SSL) method, an encrypted connection is established between two devices. Intermediary devices on the transmission path cannot intercept the data.
TLS replaces the previous SSL procedure(Wikipedia). Even if one still speaks of SSL, it is usually TLS encryption.
The most common TLS/SSL application is the encryption of data traffic between a browser and a web server via the HTTPS protocol. When establishing a connection, the best protocol supported by both end devices is selected.
An encrypted connection should be used for all websites that transfer personal data (inquiry form, login, store, forum, etc.).
An SSL certificate is issued and installed on the server for the domain in order to check whether the website being accessed is actually the desired site (and not, for example, a copy created by a third party).
Depending on the certificate, the authenticity of the domain or the owner can be checked in the browser. Each SSL certificate has a validity period (usually 1-5 years).
If a certificate is invalid or has expired, the website visitor receives a warning and should not visit the website. In this case, the security of the data is not guaranteed. In some cases, the browser refuses to establish a connection.
Self-issued certificates
The operator of a server can also issue SSL certificates for their domain(s) themselves (self-signed certificates). However, as these were not issued by an organization classified as trustworthy, the certificate is marked as "untrusted" in the browser.
In contrast, all other certificates are derived from a root certificate issued by a trustworthy organization. If a root certificate is compromised, the corresponding certificate can be revoked in the browser, meaning that all certificates derived from it are no longer trustworthy. In this case, the certificates must be reissued.
Quality check of SSL certificates
Not every SSL certificate (or provider) is equally good. On the QUALYS SSL Labs website you can check an SSL certificate for vulnerabilities in just a few minutes. The certificates we offer deliver a very good result (A).
This page contains automatically translated content.

