SSL Certificates: FAQ

Q: Why should I get an SSL certificate?

A: SSL Certificates are used to protect the communication between your website and the website users. For example,if you have a website that requests a Username/Password login, or has a user enter any data into a form, that website should be secure.

Q: Who is allowed to request a certificate?

A: The supported SSL certificates are only approved for legitimate University purposes. In general, this means that only requests from faculty or staff will be approved.

Q: What is the difference between Class-1 and Class-2 Certificates?

A: In most cases, Class-1 and Class-2 certificates will perform similarly. In general, the main difference between the two classes is the verification process. The process for verifying the requestor of a Class-2 is usually more rigorous--requiring a signed business document, a photo I.D., and organization approval. For our supported Class-1 certificates, the verification process is still fairly rigorous, but requires less time from the requester. For Class-1 certificates, the security group will be verifying the certificates using domain info, our directory, and by contacting the user on the phone.

Q: When should I still use a Class-2 Certificate instead of Class-1?

A: For applications that require a higher level of security, people are required to use Class-2 certificates. Class-2 certificates are required in cases when you are working with financial data, health information, or any data that might be subject to identity theft requirements.

Q: Why are we offering to support Class-1 Certificates?

A: To reduce costs, and to make it easier for people who need SSL certificates for their websites to get them. Because requesters will initiate the process using production quality provider websites, the whole process
should go more smoothly as well.

Q: What is the process for getting a supported Class-1 Certificate?

A: Requesters should 1st send an e-mail to or to certificates@ithelp.uoregon.edu to notify us that a new request will be forthcoming. After that, the requester can visit the provider of choice. Once they enter their information, and submit their certificate request, we will automatically be notified of the request by the provider. At that point we will attempt to contact the requester, and will approve or deny the request. If approved, the certificate will be generated, and the requester will receive an e-mail.

Q: Will you continue to support Thawte Class-2 Certificates or renew my
existing Thawte Certificates?

A: We are continuing our program with Thawte/Verisign. For those who have existing certificates, we will continue to support that usage. The current price for a 1 year Thawte certificate is $186.75, with annual renewals costing $149.25.

Please Note: The prices listed are current as of October, 2007, Prices are subject to change.