I would like to get SSL-EV certification for my company website. After comparing a list of providers, I am confused by their advertisements.
Why do all providers say that their certifications support 40-128 bit encryption? In my mind, it only related to the handshake stage of SSL. It is controlled by Apache/Nginx server. If I only keep 128 bit encryption algorithms in candidate list, there is no way to create a 40 bit SSL connection. What does it matter to the certification?
SSL-EV in GeoTrust has lowest price. Does their certification have lower security or credit comparing to Symantec/Verisign?
My website is located in China. I heard a rumer "Due to US export rules, if out of USA, in SSL handshake stage, the calculated master key is 128 bit, but only 40 bit is encrypted, the other 88 bit is plain text." Is it true?
Is SGC useless? If so, why do the providers still sell them with very high price?