comodo japan | ssl 証明書 - creating trust...

Creating Trust OnlineTM

Extended Validation (EV)High Assurance SSL Certificate

Reseller Program



Introduction:Comodo is proud to introduce the EV SSL Reseller Program specifically designed to give you the ability to share the benefits

and profit opportunities of EV SSLcertificates with your own customers.

As the world's second largest Certification Authority, Comodo's partner program offers eMerchants access to the latest

products and services which enable you to generate more revenue from more of your customers. How? By helping

eMerchants create trust with their customers.

EV SSL certificates are an important tool in creating trust online as vetted merchants whose identity can be verified

will receive EV SSLcertifciates clearly displaying their credentials in next generation web browsers such as IE 7.

Comodo's reseller program is renowned for its patented technologies that deliver authenticated identity SSLsolutions making

it easier and more profitable for you to provide SSLcertificates to your customers.

You have two options to sell EV SSL certificates right away - you can integrate an ordering URL into your existing webpage

or you ca simply copy a Comodo website template page into your own site. The new template is fully customizable and will allow you yoyouu

you to smoothly integrate your EV SSLcertificate offering into the existing look and feel of your website.

One of the largest portfolio's of PKI-based digitalcertificates including SSL certificates, Content Verification

Certificates, eMail Certificates and PC Client Certificates

Portfolio of 8 Public root certificates under direct ownership

Diverse set of customer management systems aligned to customer requirements and SLA's

Fully automated process for certificate issuance with unlimited re-issuance policy

Virtually universal browser ubiquity (99+%) with 128/256 bit industry standard encryption

Infrastructure to support EV identity validation assurance and other high assurance validation in less than 10

minutes

The world's only 2 tier sales infrastructure, enabling resellers to automate their own channel partners

Delivering EV SSL certificates with SGC (Server Gated Cryptography) to enable older browsers to achieve 128-bit

equivalent encryption

The only global CA offering fully integrated private white labeling and branding solution

Comodo delivers SSL Innovation for Creating Trust Online

�

�

�

�

�

�

�

�

�


You will find answers to the following questions:

1) How can I deploy EV SSL certificates - can I use my existing Comodo systems?

2) Can I validate EV SSL certificates?

3) Do I need to sign a new agreement and where can I get it from?

4) When can I start issuing EV SSL certs?

5) How much do they cost?

6) How does the customized Instant SSL sales system work – what do I need to do to sell EV SSLCertificates? ( a step-by-step introduction)

EV Reseller EV SSL CertificateDeployment Overview:

1) How can I deploy EV SSL certificates - can I use my existing Comodo systems?

2) Can I validate EV SSL certificates?

3) Do I need to sign a new agreement and where can I get it from?

4) When can I start issuing EV SSL certs?

5) How much do they cost?

6) How does the customized Instant SSL sales system work - what do I need to do to sell EV SSL

certificates?

Yes you can. EV SSL Certificates are just another product in your portfolio and deployment is similar to that of any other

Comodo SSL Certificate. The key difference is the validation process now requires additional credentials to be submitted

before a certificate can be issued. Therefore, both you and your customers need to be aware that issuing an SSL certificate

can take time.

Comodo will do the validation work for you. We will be releasing details of an EV Registration Authority (RA) programe

shortly.

Yes, selling EV SSL Certificates requires additional reporting duties therefore you will have to sign a new reseller agreement

with us. Please contact your Comodo sales representative for details.

As soon as your new reseller agreement has been signed.

Simply login to your current reseller account to find your EV pricing. New to Comodo? Great. Give us a call on 1 888

comodo1 or email us [email protected] and we'll get you started.

Here's your step-by- step introduction to deploy EV SSLcertificates and other Comodo SSLcertificates.

The following document is intended to easily enable you to resell the new premium class SSL Certificates –

Extended Validation the EV SSL Certificates to your customers.Astep by step guide will assist you to setup a reseller

account for EV SSL certificates as well as introducing you into the Comodo reseller backend infrastructure.


Logging into your Reseller Account:

You can log into your account using the username and password provided during your Reseller signup.

Follow the “login” link displayed throughout www.instantssl.com. If you have forgotten these details please contact

[email protected] immediately. When you have logged into your account click the “Reseller Options”

button. You will be taken to the following page:

Account Actions:

Run reports onyour sales

Your currentcredit level andAccount Actions

Details and helpon how to getyour ResellerProgram up andrunning

Click toauthorize orreject a pendingcustomer order

Depositing Additional Funds:

Your Reseller Account operates on a prepayment system. You may top up your account at any time with additional funds by

selecting “Deposit Funds”. Unless you have sufficient funds in your ResellerAccount you will not be able toAuthorise Orders.

Our online management system allows you to deposit funds to be used to purchase any SSL Certificates for your customers,

whilst the prepayment system ensures you can start purchasing SSLCertificates at great discounts quickly and easily.


Your Current Buy Prices:

Setting up your Reseller Facilities:

Customizing an order page for EV SSL Certificates:

Click the “View your Current Buy Prices” to display a summary table containing your current buy prices as set by your Account

Manager.

As a Reseller you are provided with a number of Ordering URLs to feed your customers into the InstantSSL & IdAuthority

application process. You must use the Ordering URLs in order to pass customers through to your reseller area and to specific

products. In you Reseller area you will also find a specify ordering URLfor EV SSLCertificates.

The order process for EV SSL Certificates will offer you offer you more flexibility then from the one above. At

http://www.instantssl.com/ssl-certificate-affiliates/resellers/evssl-certificate-api-template.html you will find a template

generator.The generated HTML code can be directly integrated into your own

the Reseller Management System at Comodo. The only thing you need to do

your template.

Step 1: Generate your template Step 2: Integra(Belowinto a C

website. This template is directly connected to

is enter your reseller ID before you generate

te the template in your own websiteyou see a sample where the template has been integratedomodo website)


Your ordering URLs for all Comodo SSL products inducing EV SSL:

Making an actual sale:

Click on the View your Ordering URLs link. As a Reseller you must use the set of Ordering URLs displayed when passing

customers through to the Certificate application pages. Your Ordering URLs will contain a reference to:

Your Reseller IDThe SSL product typeProduct specific parameters

The Reseller program is designed to allow you to develop your own 'product selection page. Simply use your Ordering URLs

as your product selection links.

gives a full specification of the Ordering URLs should they be required.

Customers referred using your Ordering URLs will enter your white-labelled application area. The customer will now be

required to enter their Certificate Signing Request and corporate details. Upon completion of the web forms and receipt of the

application details by Comodo, the customer will then be prompted to close the Instant SSLbrowser.

�

�

�

Appendix 1

Step 3: Details received

Notes: InstantSSLwill not charge the customer directly for their Certificate. The cost of the Certificate will be debited from your Reseller account.

Step 1: Customer submits CSR Step 2: Customer complete corporate details


Authorize / Reject a sale:

An alert email will be sent to your administrator contact upon the successful receipt of an application. You will be asked to log

into your ResellerAccount Manager and to either authorize or reject a sale:

Customer Order Options:

Once logged into the InstantSSL system, select the “Reseller Options” button. Next select the “Authorize

Your Customers' Orders” button for the Authorization pages:

Click on the “Details” button to the left of the company name to view the Company details provided by the

applicant.

Click on the “Details” button to the left of the Certificate product type to view the Certificate specific details.

Click the “Authorize” button to initiate the customer validation process.Aconfirmation email with instructions

for validation will be sent to the customer and Comodo will begin validating the application. Upon successful

validation of the application the pending Certificate will be issued. Your Reseller Account will be debited with

the value of the certificate (as per the banding level you have been awarded).

Note: You will only be able to authorize an Order if you have sufficient credit in your account. Should the

authorize button be inactive, please deposit additional money into your account.

Click the “Reject” button to mark the pending application as being rejected. Your account will not be debited

for rejected application.

Viewing the details provided by the customer during application

Authorize a Sale

Reject a Sale


Returning Customers:

When a customer first purchases an SSL product, an account will be created on the database containing the customer's

submitted details. This ensures that returning customers can purchase additional Certificates through their account and do not

need to re-enter their corporate details.

As a Reseller, we encourage you to retain customers and promote return sales this ensures you continue to make money from

your customers. Your return customer must follow the same product links as first time purchase customers.

After following one of your Ordering URL, a login box is displayed on the “paste CSR” page. When a customer logs in at this

point, their existing details will be retrieved and they will not be required to complete the corporate details page. All details

(Company Name, Address, Admin Email Address, etc) provided during the application for the first product will be used in the

validation and issuance of the additional products. The customer will only be required to complete the first “paste CSR” page.

Your Reseller Brand Name willbe used in the login instructions

Refunds:

Running Sales Reports using the Report Facilities:

Please contact Comodo directly should you face any circumstances that do not fall into the standard Authorize / Reject

process. For example, if a customer requires a refund on an issued Certificate we must be informed in order to credit your

account and revoke the Certificate.

Return to the “Reseller Options” page. Either automatically select your date parameters from the drop down list or enter a

From Date and To Date manually. Click the Run Report button to display all customer orders within your selected time period.


to your account visit www.instantssl.com and follow the partners link. Click on the Web Hosts link

and then choose to Join the Program. You will then be prompted to either login or choose “New”

login and complete the 1 page form. Your account will then be updated with Web Host abilities.

Alternatively, you may follow the below link and sign up directly from here:

https://secure.comodo.net/products/frontpage?area=webhost&ap=instantssl

Please click on the “Visit the Reseller Promotional Center” link to view the resources available to

Promotional material:

help you make the most from reselling our SSLCertificates.

Should you have any questions regarding your Reseller account please do not hesitate to contact our support department, we

will be happy to assist you in any matter.

Remember, this is your Reseller Program, so if you have any suggestions for features or would like to see something

new that makes your life easier, please contact us.

Getting Help:

https://secure.comodo.net/products/frontpage?area=webhost&ap=instantssl


Reselling Comodo EV SSL certificates

Reselling Single Products:

Your Ordering URLs for reselling PremiumSSL Wildcard

Certificates:

If you prefer not to use ordering URLs ,you can use the new Comodo Template to set up your own EV SSL sales

page. The template can be found at: http://www.instantssl.com/ssl-certificate-affiliates/resellers/evssl-certificate-api-

template.html

Your Ordering URLs for reselling single InstantSSL, BudgetSSLand PremiumSSLCertificates:

Note: Replace the “ ” from within the Ordering URLwith your Brand Name as chosen when opening your ResellerAccount.

Your Ordering URLs to resell PremiumSSL Wildcard Certificate contain an additional parameter to other Certificates you

must also submit the number of servers for which the PremiumSSL Wildcard Certificate is to be used. Please refer to your

pricing banding for advice on multi-server pricing.

Product

InstantSSL https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=24&years=1&reseller=y



InstantSSL

InstantSSL Pro 2 year https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=34&years=2&reseller=y

InstantSSL Pro 3 year https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=34&years=3&reseller=y

PremiumSSL 1 year https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=7&years=1&reseller=y



1 https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=35&years=1&reseller=y&servers=1


3 https://secure.comodo.net/products/frontpage?ap= x&area=SSL&product=35&years=1&reseller=y&servers=3








Type Ordering URLs

1 year

2 year

3 year

Pro 1 year https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=34&years=1&reseller=y

No. of servers 1 year PremiumSSL Wildcard Certificate Ordering URLs

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

Appendix 1




Product Type Your Ordering URLs






















Premium Credentials

Premium Credentials https://secure.comodo.net/products/frontpage?ap= &area=IdAuthority&product=36&years=2&reseller=y

Premium Credentials https://secure.comodo.net/products/frontpage?ap= &area=IdAuthority&product=36&years=3&reseller=y

Note: Replace the “ ” from within the Ordering URL with your Brand Name as chosen when opening your Reseller Account.

Your Ordering URLs for reselling IdAuthority Premium

Credentials:

1 year https://secure.comodo.net/products/frontpage?ap= &area=IdAuthority&product=36&years=1&reseller=y

2 year

3 year

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx


Your Ordering URLs for reselling IdAuthority Card Payment

Credentials:

Reselling Product Bundles

Your Ordering URLs for reselling PremiumSSL Wildcard

SiteID+ Certificates:


Card Payment https://secure.comodo.net/products/frontpage?ap= &area=IdAuthority&product=37&years=1&reseller=y




on http://www.instantssl.com/ssl-certificate-products/ssl-certificate-siteid.html

InstantSSL SiteID+ https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=24,36&years=1&reseller=y



InstantSSL Pro SiteID+ https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=34,36&years=1&reseller=y



PremiumSSL SiteID+ https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=7,36&years=1&reseller=y



1 year

2 year

3 year

1 year

2 year

3 year

1 year

2 year

3 year

1 year

2 year

3 year

The Reseller system allows you to resell product bundles.

SSL Certificate plus IdAuthority Premium Credentials is offered under the product name of

Your Ordering URLs to resell PremiumSSL Wildcard SiteID+ contain an additional parameter to other SiteID+ products you

must also submit the number of servers for which the PremiumSSL Wildcard Certificate is to be used. Please refer to your

pricing banding for advice on multi-server pricing.

SiteID+


xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

Your Ordering URLs for Reselling SSL Certificate plus IdAuthority PremiumCredentials


No. of servers 1 year PremiumSSL Wildcard SiteID+ Ordering URLs

No. of servers 2 year PremiumSSL Wildcard SiteID+ Ordering U

No. of servers 3 year PremiumSSL Wildcard SiteID+ Ordering U

1 https://secure.comodo.net/products/frontpage?ap= &area=SSL&product=35,36&years=1&reseller=y&servers=1



4 https://secure.comodo.net/product s/frontpage?ap= &area=SSL&product=35,36&years=1&reseller=y&servers=4





9 https://se cure.comodo.net/products/frontpage?ap= &area=SSL&product=35,36&years=1&reseller=y&servers=9






5 https://secure.comodo.net/products/frontpage?ap= &area=SSL&product =35,36&years=2&reseller=y&servers=5

















xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

xxx

RLs

RLs

xxx


Adding IdAuthority Card Payment Credentials to a Single

Certificate / SiteID+ Sale:

Opening the Ordering URLs in a New Browser Window:

Details on this product are available at www.instantssl.com/products/trustlogo.html

You may also bundle the IdAuthority Card Payment Credentials within a single certificate sale or the sale of an existing SiteID+

bundle.

Simply amend the Ordering URLof the product for which the Card Payment Credentials is being added:

The “product=” variable must contain the ID number of the Card Payment Credentials product (37). For example, a 3 year

PremiumSSLWildcard for use on 1 server would be:

https://secure.comodo.net/products/frontpage?ap=xxx&area=SSL&product=35,36,37&years=3&reseller=y&servers=1

The above Ordering URLhas a “,37” inserted into the product variable.

It is essential that the Ordering URLs be opened in a new browser window so as not to interfere with your current sales process.

You can usually achieve this by inserting a “target=_blank” into theAnchor tag within you HTML. For example:

<a href="https://secure.comodo.net/products/frontpage?ap=ABCInc&area=SSL&product=24&years=1&reseller=y"

target="_blank">

Upon completion of the InstantSSL application process your customer will be prompted to close the browser white-labelled

with your branding.


InstantSSL https://secure.comodo.net/products/frontpage?ap=xxx&area=SSL&product=43

Note: Replace the “xxx” from within the Ordering URL with your Brand Name as chosen when opening your Reseller Account

Unlike other links please note that “reseller=y” does NOT need to be present

1 year

Submitting Requests for FREE Trial Certificates (NOTE: This does not apply toEV SSL certificates):


Extended Validation Overview

Extended Validation (EV) SSL Certificates are the next generation of SSL certificates. These certificates are meant to combat

emerging online threats that continue to erode trust online. Specifically, these certificates will provide a new way for merchants

to prove that their site has been verified as an authenticated business. EV SSLCertificates are designed to provide visitors

with the green "good to go" browser indicator when visitors go to a secure page.

EV SSL Certificates are designed to provide visitors with the green "good to go" browser indicator when visitors go to a secure

page.

In Internet Explorer, an EV SSL Certificate will turn the address bar green and display the name of your business next to the

webaddress.

All major browsers (e.g. Microsoft,Mozilla Opera etc) are integrating new displays in order to provide consumer's with a visual

indicator of a website's security. Visitors of an EV SSL Certificate protected website can quickly and easily be assured that the

site is a safe place to shop.

The Extended Validation (EV) SSL vetting process will validate the requestor's domain control and verify the requesting

entity's legal existence and identity. The EVSSL validation process is the most extensive and rigorous in the Industry. This

process ensures that the green trust indicator will only be awarded to trustworthy and non-fradulent websites.

Unlike other validation processes in the SSL industry, a certification authority issuing EV SSL Certificates cannot rely on any

kind of self-reported data (such as address and phone numbers) during the vetting process. This means that all data provided

by a company hoping to obtain an EV SSLCertificate will be checked agains relaible third-party sources.

Before an EV SSLcertificate can be issued, three important steps need to be performed by the EV SSLcertificate vendor. The

steps are:

1) Confirm the existence of the Company through 3rd party sources

2) Verify that the request has been made on behalf of the company

3) Obtain mutual confirmation of the request between the Certificate Authority and the requesting party

Typically this is a contract that will be sent at the end of the validation process to the requesting party . The contract must

be signed by an authorized person.

For all three steps listed above, special guidelines spell out in detail what background checks should be be performed by any

CertificateAuthority issuing EV SSLCertificates.

Overview of the Extended Validation SSL Certificate Vetting Process

Overview of the Extended Validation SSL Certificate Vetting Process

Appendix 2


Domain name.

Individual's authorization.

Legal existence and identity.

Physical existence.

Telephone number.

A customer wishing to obtain an EV SSL Certificate must own and control the domain name that will utilize the EV SSL

Certificate. The CA will check website registration records (Whois database) or may ask the customer to make a change to the

website under the domain name.

The Certification Authority must verify that the individual requesting the certificate is acting as a legitimate agent for the

requesting company. One way in which a CA may verify this data is by contacting the requesting company's human resource

department.

The CAwill also verify the identity of the contract signer. ( in most cases this will be a C level management person) Usually this

is verified with written documentation.

ACAwill check to make sure that the business is legally recognized and that the formal name matches the official Government

records. In cases were a trading name is used, the CAmust verify any alternative names that differ from the legal name of the

customer in qualified databases.

The Certification Authority is required to cross-check the address listed in the certificate application against a qualified

government database.

If the listed address cannot be verified by consulting the government database, an on-site visit may be necessary to

investigate the discrepancy. Investigators may need to take photos of business operations or speak with company personal.

The CA will confirm that the telephone number listed on the certificate application is the primary telephone number for the

requesting organization. This is accomplished by calling the number directly or by checking phone directory listings.

Note : If some of the above can not be validated or fully identified, other means of verification are required. The CA will rely on an official letter from a

lawyer, notary or accountant. In these cases the authenticity of the documents and the issuing entity will be validated.


About ComodoComodo is a leading global provider of Identity and Trust Assurance services on the Internet, with over 300,000 customers

worldwide. Headquartered in Jersey City, NJ with global offices in the US, UK, Ukraine and India, the company offers

businesses and consumers the intelligent security, authentication and assurance services necessary to ensure trust in online

transactions.

As a leading Certification Authority, and in combination with the Digital Trust Lab (DTL), Comodo helps enterprises address

digital ecommerce and infrastructure needs with reliable, third generation solutions that improve customer relationships,

enhance customer trust and create efficiencies across digital ecommerce operations. Comodo’s solutions include SSL

certificates, integrated Web hosting management solutions, web content authentication, infrastructure services, digital e-

commerce services, digital certification, identity assurance, customer privacy and vulnerability management solutions.

For additional information on Comodo – Creating Trust Online ™

please visit www.comodo.com

Comodo

Comodo Group

US Office,

525 Washington Blvd.,

Jersey City, NJ 07310

Tel : +1.888.COMODO.1

email : [email protected]

www.comodo.com

3rd Floor, Office Village,

Exchange Quay, Trafford Road,

Salford, Manchester M5 3EQ,

United Kingdom.

Tel Sales: +44 (0) 161 874 7070

Fax Sales: +44 (0) 161 877 7025

http://www.comodo.com

http://www.comodo.com

mailto:[email protected]

comodo japan | ssl 証明書 - creating trust...

Documents