SSL Certificates - Secure Server Certificates: Unterschied zwischen den Versionen

Version vom 5. August 2012, 22:33 Uhr

SSL certificates are usually utilized with ecommerce shopping carts, or anyplace you want to collect info from a user securely on your internet site. If you use a secure server certificate with a form and that form emails the outcomes to you maintain in mind that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link between a web server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from...

What is SSL?

SSL certificates are typically employed with ecommerce shopping carts, or anywhere you want to collect info from a user securely on your internet site. If you use a secure server certificate with a form and that form emails the outcomes to you maintain in mind that the email is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link in between a web server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a web server. A CSR looks like this:

-----Start NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----Finish NEW CERTIFICATE REQUEST-----

1st, you need to make a decision whether or not to use your hosting shared SSL certificate if they offer it. The URL to your store will appear some thing like:

https://theirserver.com/youruserid/your/path/to/retailer.html

Or do you want to get your own SSL certificate? The URL will appear like:

https://yourdomainname.com

If you decide to use your hosts' shared secure server certificate, then all you require to do is locate out the path you need to use to call your files securely, and you will be on your way.

If you decide to get your personal SSL certificate, this is normally sox security what occurs.

You very first want to make a decision who you are going to get your SSL certificate from. It is a excellent thought to make confident your host supports your specific vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also review a number of vendors at a glance at WhichSSL

Prior to acquiring your personal SSL certificate, you will need to do some reading on what your selected Certificate Authority requires for a secure certificate, and you'll also need to come up with some documentation. There are many steps to acquiring a secure server certificate, as soon as you have decided on a vendor.

This is an overview, not written in stone. Each and every CA is various, so make sure you read their documentation and what they demand. Right here is an thought of what they want:

All documentation that is requested need to match *exactly*. Secure certificate authorities will verify that your organization truly exists, so they know they are issuing to the correct company. You will need to prove that the Organization Name and the Domain name are in fact yours to use.

Actions you will be taking:

* Collect required documentation

* Have your host create a CSR

* Total certificate authority on the web application

* Certificate authority will process your request

* Pickup and install your SSL certificate (usually an URL is emailed to you to download the secure server certificate)

* Based on the vendor, it can take a few hours to a few days.

* Send secure certificate to host for installation. (Send in plain text)

Once your net hosting provider receives this info they will create the CSR and send it back to you key escrow in pki in plain text. You then send it on to Verisign or Thawte, or whoever you have selected as your secure certificate authority. They will then generate a SSL certificate for entrust truepass applet you which you will send back to your host for installation. Your web host might charge a fee for installation in addition to what your SSL certificate vendor charges.

One thing to consider about:

If you've decided to acquire your own SSL certificate, you will require to choose how you want your URL to be called. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make confident you indicate this to your host when you request a CSR from them. If you don't, and you get the certificate for yourdomainname.com (with no the www), this will result in browser errors, generating the certificate appear insecure, and you will want to change your coding.

Always use your self or your firm as technical contact.

How to tell if a web site is secure?

Soon after you have browsed to a web site securely employing https:// in the URL, look on the lower proper hand side of your browser. You should see a closed lock. This will tell you the web site is secure.