4 ms·

Th problem with EV (green bar) certs is the Browser usually ends up checking the certificate status via CRL or OCSP (URI is specified in the cert), which can ad

Th problem with EV (green bar) certs is the Browser usually ends up checking the certificate status via CRL or OCSP (URI is specified in the cert), which can add an additional .5 to 10+ seconds before the page is displayed. More so when the CA servers are down or the connection times out. So if you do go for an EV cert, go for the one that has the best listed uptime on it's CRL or OCSP servers. Having said that, I would never spend more than $10 on a cert, and just use the most standard/common "bundled" CA cert. No one will ever know. It will have faster page loads. And those fake stories that EV certs increase conversions are exactly that, fake, and misleading. No one will real world experience has ever claimed to see a positive difference with EV certs. The only problem with cheaper certs is you have to bundle the intermediary CA certs... http://www.devside.net/wamp-server/installing-comodo-positivessl-certificate-bundled-with-root-and-intermediate-ca-certificates-on-apache http://www.devside.net/wamp-server/installing-comodo-positiv...

shiftpgdn 12y ago
I accidentally let our EV cert expire a few years ago and ordered $10 domain verified Comodo Cert to tide us over. Hilariously we saw absolutely 0 change in order metrics. I didn't renew the EV cert. EV certs are a neat idea but the average consumer doesn't understand/know about them.
richm44 12y ago
You get OCSP checking for non-EV certificates too in many browsers. However, you can remove any additional delay by using OCSP stapling.
pbreit 12y ago
Such bad advice given the inquiry. Obviously. Lot of OP's customers are going to want the "best" certs (whatever that means). Or they're going to want "they're name in green". It's important to answer in the context of the question.
- powertower 12y ago
  "So if you do go for an EV cert, go for the one that has the best listed uptime on it's CRL or OCSP servers." http://uptime.netcraft.com/perf/reports/performance/OCSP http://uptime.netcraft.com/perf/reports/performance/OCSP How is the above bad advice, and not answering the context of the question? What other possible qualification is there for "best" EV certs? They are all "green bar". There is little else to them except price differences. His customers are going to want a responsive page load time, none of them are going to pull the certificate to make sure he went with a DigiCert EV instead of a GeoTrust EV.
  - pbreit 12y ago
    I was responding mainly to: "I would never spend more than $10 on a cert" and "No one will ever know" and "can add an additional .5 to 10+ seconds" and "Ev stories are fake" and "no one with real world experience has ever had positive experience". Having worked with thousands of business in ecommerce I can guarantee you that a large percentage will want their name to appear "like PayPal and Citibank".
deleted 12y ago
[deleted]

shiftpgdn 12y ago

I accidentally let our EV cert expire a few years ago and ordered $10 domain verified Comodo Cert to tide us over. Hilariously we saw absolutely 0 change in order metrics. I didn't renew the EV cert. EV certs are a neat idea but the average consumer doesn't understand/know about them.

richm44 12y ago

You get OCSP checking for non-EV certificates too in many browsers. However, you can remove any additional delay by using OCSP stapling.

pbreit 12y ago

Such bad advice given the inquiry. Obviously. Lot of OP's customers are going to want the "best" certs (whatever that means). Or they're going to want "they're name in green". It's important to answer in the context of the question.

powertower 12y ago
"So if you do go for an EV cert, go for the one that has the best listed uptime on it's CRL or OCSP servers." http://uptime.netcraft.com/perf/reports/performance/OCSP http://uptime.netcraft.com/perf/reports/performance/OCSP How is the above bad advice, and not answering the context of the question? What other possible qualification is there for "best" EV certs? They are all "green bar". There is little else to them except price differences. His customers are going to want a responsive page load time, none of them are going to pull the certificate to make sure he went with a DigiCert EV instead of a GeoTrust EV.
- pbreit 12y ago
  I was responding mainly to: "I would never spend more than $10 on a cert" and "No one will ever know" and "can add an additional .5 to 10+ seconds" and "Ev stories are fake" and "no one with real world experience has ever had positive experience". Having worked with thousands of business in ecommerce I can guarantee you that a large percentage will want their name to appear "like PayPal and Citibank".

deleted 12y ago

[deleted]