{"id":837,"date":"2019-11-25T12:34:16","date_gmt":"2019-11-25T12:34:16","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/p\/?p=837"},"modified":"2021-09-22T09:53:29","modified_gmt":"2021-09-22T09:53:29","slug":"ip-ssl-vs-sni-ssl","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/","title":{"rendered":"IP SSL vs SNI SSL"},"content":{"rendered":"

What is the difference between IP SSL vs SNI SSL certificates? Here\u2019s how to choose the right one for your website<\/h2>\n

When it comes to choosing the right SSL\/TLS certificate, everyone gets confused. It\u2019s pretty obvious because there are so many types of certificates, versions, compatibility, verification levels, and technical components that selecting the most suitable certificate becomes a daunting process. One of the common issues people face is understanding the difference between IP based SSL and SNI SSL certificates. In this article, we address all the relevant points on the topic IP SSL vs SNI SSL certificate so you can make an informed decision.<\/p>\n

<\/p>\n

IP Based SSL vs SNI SSL Certificate: Key Differences<\/h2>\n

Technical Features<\/h3>\n

A Server name indication (SNI)<\/strong>\u00a0certificate, also known as SNI cert, is an extension of the secure TLS protocol. SNI enables most modern web browsers (clients) to indicate which hostname (domain name) they\u2019re trying to connect to during the TLS handshake process. Such host headers enable servers to understand which website\u2019s certificate chain it is supposed to fetch to establish an HTTPS connection. Because of SNI, all of the sites hosted on the same IP address and same port can have separate SSL certificates.
\nNote: We have included SNI technology in an easy-to-understand way with a fun example in the latter part of this article.
\nNow, let\u2019s compare this to an internet protocol (IP) SSL<\/strong> certificate, which is installed on a domain that’s hosted on a dedicated IP address. It attaches a website with its unique IP address. So, there would be one SSL certificate for one website on one dedicated IP address.<\/p>\n

User Classification<\/h3>\n

Cloud-based services providers use SNI SSL certificates. These services include website builders, content distribution networks (CDNs), eCommerce platforms, or any other anything-as-a-service (XaaS) provider that is supplying a common platform for many websites.<\/p>\n

IP SSL certificates are used by anyone who has hosted a website on a dedicated server with unique IP address.<\/p>\n

Compatibility<\/h3>\n

SNI compatibility (earliest versions)<\/strong>
\n\u2022 IE 7 +,
\n\u2022 Mozilla Firefox 2.0 +,
\n\u2022 Opera 8.0 +,
\n\u2022 Chrome 5.0.342.1 +,
\n\u2022 Safari 3.0 +,
\n\u2022 Mobile Safari for iOS 4. and later, and
\n\u2022 Windows 7+ for Phone.<\/p>\n

Note:<\/strong> Internet Explorer (any version) on Windows XP does not support SNI.
\nYou must contact your hosting provider to confirm whether they support SNI. If they don\u2019t, you need to host your website on a dedicated IP in order to install an SSL certificate. Your hosting provider would ask you to buy a dedicated IP to secure your website with an SSL certificate if they don\u2019t support SNI.<\/p>\n

IP SSL certificates<\/strong> are compatible with all the major browsers and operating systems.<\/p>\n

Price<\/h3>\n

SNI SSL certificates<\/strong>\u2019 prices are available only upon request. CAs generally customize each certificate based on the requesting organization\u2019s requirements.
\nPrice for IP SSL<\/strong>
\nAll the SSL certificates available on cheapSSLsecurity can be used to secure a website hosted on a dedicated IP address. The following SSL certificates will also work if you are looking forward to securing a public facing IP address.<\/p>\n

Let\u2019s compare the prices of popular organization validated (OV) IP SSL Certificates<\/strong><\/p>\n

\n\n\n\n\n\n\n\n\n
Name<\/strong><\/td>\nWarranty<\/strong><\/td>\nDomain Coverage<\/strong><\/td>\nPrice<\/strong><\/td>\n<\/td>\n<\/tr>\n
Instant SSL<\/strong><\/td>\n$50K<\/td>\nSingle Domain<\/td>\n$23.51\/yr.<\/td>\nMORE INFO<\/a><\/td>\n<\/tr>\n
InstantSSL\u00a0Pro<\/strong>\u00a0\u00a0<\/strong><\/td>\n$100K<\/td>\nSingle Domain<\/td>\n$29.78\/yr.<\/td>\nMORE INFO<\/a><\/td>\n<\/tr>\n
Sectigo\u00a0OV SSL<\/strong>\u00a0\u00a0<\/strong><\/td>\n$1MM<\/td>\nSingle Domain<\/td>\n$64.19\/yr.<\/td>\nMORE INFO<\/a><\/td>\n<\/tr>\n
Sectigo\u00a0OV SSL Multi-Domain\/UCC<\/strong>\u00a0<\/strong><\/td>\n$1MM<\/td>\nMultiple Domains<\/td>\n$73.70\/yr.<\/td>\nMORE INFO\u00a0<\/a><\/td>\n<\/tr>\n
Comodo EnterpriseSSL<\/strong>\u00a0\u00a0<\/strong><\/td>\n$1.5MM<\/td>\nSingle Domain<\/td>\n$203.84\/yr.<\/td>\nMORE INFO<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

How SNI Certificate is Like a Pink Dress!<\/h2>\n

Let\u2019s consider a fun example before moving to SNI technology.
\nYour friend Alice asked you to buy her a pink dress from Bob\u2019s store. When you went to Bob\u2019s shop and asked for the pink dress, he understood which dress you were looking for, because there was only one pink dress in his store. You made the purchase. Transaction completed.
\nNow, check out the other scenario. What if Bob\u2019s store has 50 pink dresses? Now, it\u2019s a problem because Bob doesn\u2019t know which pink dress Alice is looking for. The purchase won\u2019t be completed until Bob brings the right pink dress.
\nBecause the shop has multiple pink dresses, the “pink dress” description won’t be enough. You ask Alice for more details, and Alice gives you the barcode of the pink dress she is looking for. You give it to Bob, and he knows which exact dress to bring. Easy!<\/p>\n

Now, let\u2019s consider the same scenario with TLS\u2019s context.<\/strong><\/p>\n

When a user tries to open a website on a browser, the browser goes to the server (on which the website is hosted) and asks for the site\u2019s digital certificate. This request is made in the HTTP host header. When the server fetches the requested certificate, the browser matches the name on the certificate with the website the user is trying to visit. If the name matches, the TLS connection is established. If not, the users will get a \u201ccommon-name-mismatch\u201d error page.<\/p>\n

Previously, host headers used to specify the IP address of the website it is trying to connect. With this approach, each site had to have its own IP address for the server to understand which certificate it needed to fetch. (In our example, one pink dress per shop.)<\/p>\n

In the early days of the commercial internet, only big organizations could afford to have a website and were eligible to pass through the organization validation (OV) process. So, the number of websites was limited, and each website was usually hosted on a unique IP address as a result.<\/p>\n

The Problem with Using only IP Addresses in Host Headers<\/h4>\n

With the rise of the internet, millions of new websites flooded the internet. However, the IP addresses in IPv4 has approximately a total of four billion unique IP addresses, which will eventually get depleted. To slow down the exhaustion of unique IP addresses, the shared hosting environment came into the picture, enabling companies to host multiple websites on the same virtual server using the same IP address. But such sites were not eligible to form a secure HTTPS connection because the server didn\u2019t know which particular website\u2019s certificate it needs to bring as the same IP address was shared by multiple domain names.<\/p>\n

To resolve this situation, SNI was introduced in 2003. Since that time, browsers can specify the hostname (website’s name) in the host header instead of the IP address. Now, the server knows which domain name\u2019s certificate it needs to present to the browser during the TLS handshake. In other words, the servers recognize a website by its domain name instead of its IP address during the SSL handshake. This enables all the sites hosted under the same IP address to have separate SSL certificates.<\/p>\n

In our example, Bob can recognize a dress by its barcode \u2014 which is separate for each dress \u2014 instead of the vague description of a \u201cpink dress,\u201d which can be applicable to many apparels available with him.<\/p>\n","protected":false},"excerpt":{"rendered":"

What is the difference between IP SSL vs SNI SSL certificates? Here\u2019s how to choose the right one for your website When it comes to choosing the right SSL\/TLS certificate, everyone gets confused. It\u2019s pretty obvious because there are so … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23,2],"tags":[],"class_list":["post-837","post","type-post","status-publish","format-standard","hentry","category-comparisons","category-ssl-types"],"yoast_head":"\nIP SSL vs SNI SSL - What's is the Real Difference? An Expert Review<\/title>\n<meta name=\"description\" content=\"What is the difference between IP SSL vs SNI SSL certificates? Which one is right for your website?Know Everything about IP SSL vs SNI SSL\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IP SSL vs SNI SSL - What's is the Real Difference? An Expert Review\" \/>\n<meta property=\"og:description\" content=\"What is the difference between IP SSL vs SNI SSL certificates? Which one is right for your website?Know Everything about IP SSL vs SNI SSL\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/\" \/>\n<meta property=\"og:site_name\" content=\"Cheap SSL Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/CheapSSLSecurities\" \/>\n<meta property=\"article:published_time\" content=\"2019-11-25T12:34:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-09-22T09:53:29+00:00\" \/>\n<meta name=\"author\" content=\"casey.crane\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"casey.crane\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/\"},\"author\":{\"name\":\"casey.crane\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/d9c1744bb0931c1942814061a5aca108\"},\"headline\":\"IP SSL vs SNI SSL\",\"datePublished\":\"2019-11-25T12:34:16+00:00\",\"dateModified\":\"2021-09-22T09:53:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/\"},\"wordCount\":1158,\"articleSection\":[\"SSL Certificate Comparison\",\"SSL Types\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/\",\"name\":\"IP SSL vs SNI SSL - What's is the Real Difference? An Expert Review\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#website\"},\"datePublished\":\"2019-11-25T12:34:16+00:00\",\"dateModified\":\"2021-09-22T09:53:29+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/d9c1744bb0931c1942814061a5aca108\"},\"description\":\"What is the difference between IP SSL vs SNI SSL certificates? Which one is right for your website?Know Everything about IP SSL vs SNI SSL\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ip-ssl-vs-sni-ssl\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"SSL Help\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSL Certificate Comparison\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/comparisons\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"IP SSL vs SNI SSL\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#website\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/\",\"name\":\"Cheap SSL Security\",\"description\":\"Shop for SSL Certificates at Cheap Prices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/d9c1744bb0931c1942814061a5aca108\",\"name\":\"casey.crane\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g\",\"caption\":\"casey.crane\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IP SSL vs SNI SSL - What's is the Real Difference? An Expert Review","description":"What is the difference between IP SSL vs SNI SSL certificates? Which one is right for your website?Know Everything about IP SSL vs SNI SSL","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/","og_locale":"en_US","og_type":"article","og_title":"IP SSL vs SNI SSL - What's is the Real Difference? An Expert Review","og_description":"What is the difference between IP SSL vs SNI SSL certificates? Which one is right for your website?Know Everything about IP SSL vs SNI SSL","og_url":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/","og_site_name":"Cheap SSL Security","article_publisher":"https:\/\/www.facebook.com\/CheapSSLSecurities","article_published_time":"2019-11-25T12:34:16+00:00","article_modified_time":"2021-09-22T09:53:29+00:00","author":"casey.crane","twitter_card":"summary_large_image","twitter_creator":"@sslsecurity","twitter_site":"@sslsecurity","twitter_misc":{"Written by":"casey.crane","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/#article","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/"},"author":{"name":"casey.crane","@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/d9c1744bb0931c1942814061a5aca108"},"headline":"IP SSL vs SNI SSL","datePublished":"2019-11-25T12:34:16+00:00","dateModified":"2021-09-22T09:53:29+00:00","mainEntityOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/"},"wordCount":1158,"articleSection":["SSL Certificate Comparison","SSL Types"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/","url":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/","name":"IP SSL vs SNI SSL - What's is the Real Difference? An Expert Review","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/p\/#website"},"datePublished":"2019-11-25T12:34:16+00:00","dateModified":"2021-09-22T09:53:29+00:00","author":{"@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/d9c1744bb0931c1942814061a5aca108"},"description":"What is the difference between IP SSL vs SNI SSL certificates? Which one is right for your website?Know Everything about IP SSL vs SNI SSL","breadcrumb":{"@id":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cheapsslsecurity.com\/p\/ip-ssl-vs-sni-ssl\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"SSL Help","item":"https:\/\/cheapsslsecurity.com\/p\/"},{"@type":"ListItem","position":2,"name":"SSL Certificate Comparison","item":"https:\/\/cheapsslsecurity.com\/p\/comparisons\/"},{"@type":"ListItem","position":3,"name":"IP SSL vs SNI SSL"}]},{"@type":"WebSite","@id":"https:\/\/cheapsslsecurity.com\/p\/#website","url":"https:\/\/cheapsslsecurity.com\/p\/","name":"Cheap SSL Security","description":"Shop for SSL Certificates at Cheap Prices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cheapsslsecurity.com\/p\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/d9c1744bb0931c1942814061a5aca108","name":"casey.crane","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g","caption":"casey.crane"}}]}},"_links":{"self":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts\/837","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/comments?post=837"}],"version-history":[{"count":0,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts\/837\/revisions"}],"wp:attachment":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/media?parent=837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/categories?post=837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/tags?post=837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}