February 8, 2018
At MaxCDN we offer three SSL options for encrypting connections between our edge servers and your end users. There are free and paid option, giving all MaxCDN customers with different budgets the opportunity to securely deliver content from MaxCDN.
Quick SSL Comparison
|Shared SSL||SNI SSL||Upload custom SSL|
|Own Certificate Required?||No||Yes**||Yes*|
* You can purchase your own certificate from a service like GlobalSign.
Free and Paid SSL Options
- Shared SSL (Free) Instead of using your own certificate, you use the certificate on our server. The upside of Shared SSL is being able to deliver content securely; the downside is not being able to control your certificate type. You must also share an IP address.
- SNI SSL (Free) This option requires you to purchase your own certificate, giving you control over what type of certificate is used. A minor downside of SNI SSL is that it’s not supported by some older browsers like IE6. You must also share an IP address.
- Upload Custom SSL(Paid) This option gives you your own IP address and the option to upload your own custom SSL certificate.
Frequently Asked Questions
What are the benefits of having a dedicated IP address?
If a shared IP address gets infected and flagged as malicious or untrusted, your CDN zone won’t be affected. Also, a full list of browsers support SSL options with dedicated IP addresses. Shared IP addresses are used for the Shared SSL and SNI SSL options offered by MaxCDN.
How much do SSL certificates cost?
There are many different types of SSL certificates offered by many different providers. For this reason, there are many different costs. How much you end up paying is determined by the type of certificate you need and the provider you purchase it through.
To give you an idea of the price range: The SSL certificate provider GlobalSign sells certificates ranging from $249/year to $849/year. On the other hand, there are free SSL certificate initiatives like Let’s Encrypt that allow you to get a certificate for free (the caveat being that it’s in beta).