How to compose an invitation to tender or to request a quotation?

When it comes to certificates matters things can get really complicated and one can easily takes a product for an other. Here are some recommendations to help you get a coherent quote or response to your invitation to tender!

Usually, when you compose an invitation to tender you do not mention nor the brand neither the kind of certificate. But you have to indicate your precise needs by mentionning the following points:

• Number of authentication factors:
  • 1-factor (low security level, out of PRIS line, Why are Domain-Validated certificates dangerous? )
  • 3-factors (Organization validated = common security level)
  • 6-factor (EV level, All about EV (Extended Validation))
• Guaranteed cypherment:
  • 40-bit warranty, up-to 256-bit
  • 128-bit warranty, up-to 256-bit, SGC standard (you absolutely need to specify "SGC standard" in your invitation to tender)
• CN format:
  • Single-CN (one CN per certificate)
  • wildcard single-CN (*.domaine.com, What are limitations of Wildcard or OmniDomain certificates?)
  • multiple-CN or SAN (several CN per certificate)
• browsers compatibility:
  • Popular browsers: IE 5.5+, Firefox, Safari 2+
  • Old browsers: IE 4, IE 5, Netscape 4.7
  • Uncommon browsers: Opera, J2RE (indicate the version)
  • Mobile browsers: Windows Mobile 5 or 6
  • Other mobile devices (phone, PDA, Pocket PC)
  (several choices)

Giving those information prevents you from getting an un-guaranteed 128-bit product sold as "128-bit compatible" or a certificate without authentication (domain-validated) instead of a fully authenticated certificate!

Besides, we advise to indicate the certificates lifetime (from 1 to 5 years according to their kind) and your terms of payment.