SSL Certificates - Secure Server Certificates

SSL certificates are usually employed with ecommerce shopping carts, or anywhere you want to collect details from a user securely on your website. If you use a secure server certificate with a form and that form emails the results to you preserve in thoughts that the e-mail is not secure.

SSL email security software (Secure Sockets Layer): Creates an encrypted link amongst a internet server and a browser. CA (Certificate Authority): The vendor encryption software you will get the secure server certificate from...

What is SSL?

SSL certificates are generally utilised with ecommerce shopping carts, or anywhere you want to collect info from a user securely on your website. If you use a secure server certificate with a form and that form emails the results to you preserve in thoughts that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link amongst a internet server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a net server. A CSR looks like this:

-----Start NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----End NEW CERTIFICATE REQUEST-----

1st, you require to choose no matter whether to use your hosting shared SSL certificate if they offer it. The URL to your shop will appear one thing like:

https://theirserver.com/youruserid/your/path/to/shop.html

Or do you want to get your own SSL certificate? The URL will appear like:

https://yourdomainname.com

If you make a decision to use your hosts' shared secure server certificate, then all you require to do is find out the path you need to have to use to call your files securely, and you will be on your way.

If you make a decision to get your own SSL certificate, this is usually what takes place.

You initial want to decide who you are going to get your SSL certificate from. It is a great concept to make positive your host supports your certain vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also critique many vendors at a glance at WhichSSL

Ahead of acquiring your own SSL certificate, you will need to do some reading on what your chosen Certificate Authority demands for a secure certificate, and you'll also want to come up with some documentation. There are several actions to purchasing a secure server certificate, once you have decided on a vendor.

This is an overview, not written in stone. Every single CA is different, so make certain you read their documentation and what they demand. Right here is an thought of what they want:

All documentation that is requested ought to match *exactly*. Secure certificate authorities will verify that your organization in fact exists, so they know they are issuing to the right organization. You will need to prove that the Organization Name and the Domain name are in fact yours to use.

Steps you will be taking:

* Collect needed documentation

* Have your host create a CSR

* Complete certificate authority online application

* Certificate authority will approach your request

* Pickup and install your SSL certificate (generally an URL is emailed to you to download the secure server certificate)

* Depending on the vendor, it can take a handful of hours to a couple of days.

* Send secure certificate to host for installation. (Send in plain text)

When your web hosting provider receives this info they will generate the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have selected as your secure certificate authority. They will then generate a SSL certificate for you which you will send back to your host for installation. Your internet host might charge a fee for installation in addition to what your SSL certificate vendor charges.

One thing to believe about:

If you have decided to purchase your own SSL certificate, you will need to have to make a decision how you want your URL to be referred to as. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make confident you indicate this to your network authentication host when you request a CSR from them. If you do not, and you get the certificate for yourdomainname.com (with out the www), this will cause browser errors, creating the certificate appear insecure, and you will require to modify your coding.

Always use yourself or your company as technical speak to.

How to tell if a website is secure?

Right after you have browsed to a internet site securely making use of https:// in the URL, appear on the lower right hand side of your browser. You should see a closed lock. This will tell you the site is secure.