Features

Features and benefits of the Entrust UC Certificate:

• Suited for use with server products that support multiple secure communications protocols and may need to process communications for multiple domains and multiple hostnames within domains
• Able to secure 10 or more hostnames on a server with the same SSL certificate using X.509v3 Subject Alternative Name (subjectAltName) extensions
• Compatible with Microsoft Exchange 2007 and Microsoft Office Communications Server 2007
• More secure than wildcard certificates since Entrust UC Certificates specify exactly which hosts and domains are to be protected
• More flexible than wildcard certificates since Entrust UC Certificates aren't limited to a single domain
• 128/256-bit SSL encryption
• Support for authentication between Web browsers and Web servers, as well as server-to-server authentication
• Unlimited re-issue guarantee within certificate lifetime (reduces unexpected costs due to minor errors while deploying SSL certificates)
• One-, two-, three- or four-year certificate lifetimes
• Strong browser support, trusted by more than 99 percent of all browsers
• Around-the-clock online support

Why Entrust SSL?

• WebTrust Seal of Assurance: Entrust was the first certificate authority (CA) in the world to earn the WebTrust for Certificate Authorities (CAs) Seal of Assurance from the American Institute of Certified Public Accountants (AICPA) and the Canadian Institute of Chartered Accountants (CICA). A WebTrust Seal provides you the assurance and confidence in the security of a public key infrastructure (PKI).
• Automatic notification of upcoming certificate expiration helps prevent service disruptions and reduce your monitoring costs.
• Automatic CRL checking: Our certificate authority is the only CA that supports Web browsers' automatic checking of the Certificate Revocation List (CRL).
• Superior service: Independent customer surveys indicate that Entrust provides superior service when compared to our competition.
• Industry-leading PKI: Our CA is based on industry-leading PKI developed by Entrust's world-class cryptographers and software developers.
• Price: Entrust certificates and certificate services are competitively priced. Why pay more for the same SSL?

How to Buy

Before you submit your UCC request to Entrust please, ensure you have the following information.

• Certificate Signing Request
• Domain is registered to your organization
• A business phone number that can be found through a third-party directory
• Billing, technical and authorization contacts details
• Payment method (see below)
• Back up of your private key

Please refer to the Entrust SSL Certificate Enrollment Guide for assistance.

*Note on payment: Entrust accepts American Express®, Visa®, and Master Card®. The credit card will not be debited until the SSL certificate has been issued. An online receipt is provided at the end of the payment process. Purchase orders will be accepted for orders of US $1,000 or more. Once a purchase order has been accepted by Entrust sales, customers will be provided with information on how to submit SSL certificate (UCC) orders.

For further information about our digital SSL certificates, or to place a purchase order, please call 1-888-690-2424 or contact us online.

Please note: If you are using a proxy server, you may experience problems when ordering online. For further information, please visit the Entrust SSL Certificate FAQs or contact Entrust Certificate Services Support.

You can refer to the Entrust SSL Certificate Enrollment Guide for help in answering these questions and more. You can also refer to support information specific to Exchange 2007 SSL Certificate and Office Communications Server 2007 SSL Certificate usage.

International

The following pricing applies to all countries outside the United States, Canada and the United Kingdom.

UC Certificate	International (US$)*
1 year	$599 each
2 year	$1,099 each
3 year	$1,499 each
* All prices are subject to change without notice. Please note: Entrust Certificate Services Affiliates offer different services which results in pricing differences. Please refer to the pricing information of the affiliate of your choice.

Looking for local service and support? Visit one of our international affiliates.

More International Pricing?

Resources

Documents

• White Paper: Securing Exchange 2007
• White Paper: Understanding Secure Sockets Layer (SSL): A Fundamental Requirement For Internet Transactions
• White Paper: Managing SSL Security
• White Paper: Foundation Repair: The New SSL (Extended Validation)
• Datasheet: Entrust Certificate Management Service

Enrollment Guides for SSL Certificates and Services

• Enrollment Guide for SSL Certificates
• Enrollment Guide for Entrust Certificate Management Services

Support

• UCC Support
• Knowledge Base
• Frequently Asked Questions
• Installation Guides
• Root Certificates
• Certificate Policies and Certification Practice Statements
• Contact Information

The Certificate Signing Request (CSR) is generated with your web server software, and contains both the public key portion of your web server's key pair and the Distinguished Name (DN) of your web server.

Please reference the Entrust SSL Certificate Enrollment Guide for further instructions on generating a CSR.

The certificate issued by Entrust Certificate Services includes the Common Name of the customer's Web server (for example, www.entrust.com). This Common Name identifies the Domain Name registered by an organization.

To determine the registered owner of the Domain Name, Entrust shall look up the Domain Name in the appropriate WHOIS database. The registered owner of the domain must match the organization name verified by Entrust.

For more information, please see the Entrust SSL Certificate Enrollment Guide.

• Billing Contact - The person where the billing receipt should be sent.
• Technical Contact - The technical contact is usually the person responsible for the daily operation of the Web server on which the Entrust Certificate will be installed. This contact will receive the certificate when it is issued.
  
  If your server is hosted by a third-party or ISP, someone within that organization should be listed as the technical contact.
• Authorization Contact - Must be a senior member of the organization that owns the domain and has the authority to request an Entrust Certificate on behalf of the organization.

For more information, please see the Entrust SSL Certificate Enrollment Guide.

The generation of a Certificate Signing Request (CSR) also includes the generation of a web server private key. It is essential to back up the private key as it directly corresponds with the Entrust SSL Certificate you will receive from Entrust. The private key is a very sensitive piece of information so please take appropriate steps to ensure that only authorized personnel have access to the web server's private key.

Entrust provides documentation for backing up a web server private key for many common web servers here: http://www.entrust.net/customer_support/webserver.cfm.

For more information, please see the Entrust SSL Certificate Enrollment Guide.