Your company has outgrown free Gmail addresses and you want email on your own domain. Then you open a hosting provider’s email page and find two products that look almost the same: business email and enterprise email. Both give you name@yourcompany.in. Both have webmail and a mobile app. One costs three times as much. This […]
How to Choose an SSL Certificate Provider in India: 8 Things to Check (2026)
Search for “best SSL certificate provider” and you’ll find dozens of sellers offering what looks like the same padlock at prices from free to tens of thousands of rupees. The encryption itself is the same strength almost everywhere. What differs is who vouches for you, what the certificate covers, and how much work it is to keep it running. That last part matters more in 2026 than it ever has.
Here are the eight things to check before you buy, in the order that saves the most trouble. If you’re still unsure what an SSL certificate is, start with what is an SSL certificate and do you really need one.
First, the 2026 change every buyer should know
Until March 2026, you could buy a certificate and forget about it for about 13 months. Not any more. The CA/Browser Forum, the body of certificate authorities and browser makers (Apple, Google, Microsoft, Mozilla) that sets the rules, voted in 2025 to shorten the maximum life of a public SSL certificate in three steps:
| Certificates issued from | Maximum validity | Replacements per year (roughly) |
|---|---|---|
| 15 March 2026 | 200 days | 2 |
| 15 March 2027 | 100 days | 4 |
| 15 March 2029 | 47 days | 8 or more |
So when a provider sells you “1 year SSL”, you’re really buying a one-year subscription during which the certificate itself has to be reissued and reinstalled. A provider that handles this for you, or installs it with automatic renewal, is worth far more than a cheap certificate you have to replace by hand. Keep this in mind through every point below.
1. Is the certificate from a trusted certificate authority?
Browsers only trust certificates issued by recognised certificate authorities (CAs). Established names include Sectigo (formerly Comodo), DigiCert and its brands (RapidSSL, Thawte, GeoTrust), and Let’s Encrypt for free certificates. A reseller is fine, as long as the certificate comes from one of these. If a seller can’t tell you which CA issues it, walk away.
2. Which validation level do you actually need?
- Domain Validation (DV) proves you control the domain. Issued in minutes, no paperwork. Right for most business websites, blogs and small shops.
- Organisation Validation (OV) also checks that your company exists. Useful when customers need to verify who runs the site, such as B2B portals.
- Extended Validation (EV) has the strictest checks. Browsers no longer show a green bar for it, so for most Indian SMEs the extra cost is hard to justify.
Don’t let a seller upsell you to OV or EV “for SEO”. Google treats every valid HTTPS certificate the same for ranking.
3. Does it cover every address you use?
This is the most common buying mistake. Check what you need to secure:
| You need to secure | Certificate type |
|---|---|
| yourcompany.in and www.yourcompany.in | Single domain (most include both) |
| shop., mail., portal. and other subdomains of one domain | Wildcard (*.yourcompany.in) |
| Several different domains, e.g. yourcompany.in and yourbrand.com | Multi-domain (SAN) |
Buying three single certificates where one wildcard would do triples the renewal work, which, with shorter validity, adds up quickly.
4. How are renewals and reissues handled?
Given the 200-day rule, ask directly:
- Will you reissue and reinstall the certificate when it expires during my subscription, or do I do it?
- Are reissues free?
- Will I get a reminder before expiry, and how far ahead?
- Can the certificate be installed with automatic renewal on my hosting?
An expired certificate shows visitors a full-page “Your connection is not private” warning. Most will leave, and online payments stop working.
5. Will they install it for you?
Installing a certificate means generating a CSR, completing validation, uploading the certificate and intermediate chain, and forcing HTTPS without breaking anything. If your SSL provider and your web host are the same company, this is usually done for you. If they’re different, you’re the one in the middle.
6. Warranty and refund terms
Paid certificates come with a warranty, which pays out to your customers if the CA wrongly issues a certificate and they lose money as a result. It’s rarely claimed, so treat it as a sign of a serious CA rather than a reason to pay more. A short refund window, such as 15 days, is more practical: it lets you back out if the certificate turns out to be the wrong type.
7. Support you can actually reach
SSL problems tend to appear at the worst moment: the morning of a launch, or when a payment gateway suddenly rejects your site. Check whether support works in Indian business hours, by phone as well as ticket, and whether they’ll help with problems like “mixed content” warnings after installation.
8. Free or paid?
Free DV certificates (Let’s Encrypt) encrypt exactly as well as paid DV certificates and already renew every 90 days automatically on most good hosts. Paid certificates make sense when you need OV/EV validation, a warranty, a specific CA your payment partner asks for, or someone else to take responsibility for installation and renewals. Many small businesses simply need the latter.
A quick checklist
- Issued by a trusted CA, named clearly
- DV unless you have a real reason for OV/EV
- Covers www, subdomains or extra domains you use
- Reissues during the subscription are included
- Expiry reminders or automatic renewal
- Installation included
- Clear refund window
- Reachable support in IST hours
Frequently asked questions
Does a more expensive SSL certificate give stronger encryption?
No. DV, OV and EV certificates all use the same encryption strength. You pay more for identity checks, warranty and service, not for stronger security.
Why does my “1 year” SSL need replacing after about 6 months?
Since 15 March 2026, no publicly trusted certificate can be valid for more than 200 days. A yearly plan therefore includes at least one reissue. This drops to 100 days in March 2027 and 47 days in March 2029.
Does the provider need to be in my city?
No. Certificates are issued online and validation happens by email or DNS. What matters is that support works in your time zone and that someone can help with installation.
Will switching SSL providers cause downtime?
Not if the new certificate is installed before the old one is removed. Both can be valid at the same time.
Do I need SSL if my site doesn’t take payments?
Yes. Browsers mark every non-HTTPS page as “Not secure”, contact forms send data in plain text without it, and HTTPS is a Google ranking signal.
Need an SSL certificate set up properly?
Salasar Hosting supplies DV certificates from Sectigo, RapidSSL, Thawte and GeoTrust in single-domain, wildcard and multi-domain versions, and can install them for you. See our SSL certificates in India page, or contact us / call +91 99620 05753. Moving hosts at the same time? Read the website migration checklist first.