SSL Certificates - Secure Server Certificates: Unterschied zwischen den Versionen

Version vom 9. August 2012, 11:31 Uhr

SSL certificates are usually used with ecommerce shopping carts, or anyplace you want to collect info from a user securely on your site. If you use a secure server certificate with a form and that form emails the results to you keep in thoughts that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link among a web server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from...

What is SSL?

SSL certificates are normally employed with ecommerce shopping carts, or anyplace you want to collect data from a user securely on your internet site. If you use a secure server certificate with a form and that form emails the results to you preserve in mind that the email is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link among a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a web server. A CSR looks like this:

-----Start NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----Finish NEW CERTIFICATE REQUEST-----

Initial, you need to determine no matter whether to use your hosting shared SSL certificate if they offer you it. The URL to your store will look a thing like:

https://theirserver.com/youruserid/your/path/to/shop.html

Or do you want to get your personal SSL certificate? The URL will appear like:

https://yourdomainname.com

If you make a decision to use your hosts' shared secure server certificate, then all you require to do is locate out the path you want to use to call your files securely, and you will be on your way.

If you choose to get your own SSL certificate, this is normally what takes place.

You initial require to decide who you are going to get your SSL certificate from. It is a good idea to make confident your host supports your certain vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also review many vendors at a glance at WhichSSL

Ahead of getting your own SSL certificate, you will need to do some reading on what your selected Certificate Authority requires for a secure certificate, and you'll also need to come up with some documentation. There are a number of steps to buying a secure server certificate, once you have decided on a vendor.

This is an overview, not written in stone. Every single CA is various, so make sure you read their documentation and what they 2 factor authentication demand. Here is an thought of what they want:

All documentation that is requested ought to match *specifically*. Secure certificate authorities will verify that your organization truly exists, so they know they are issuing to the correct firm. You will need to have to prove that the Organization Name and the Domain name are in reality yours to use.

Actions you will be taking:

* Gather necessary documentation

* Have your host produce a CSR

* Complete certificate authority online application

* Certificate authority will process your request

* Pickup and install your SSL certificate (typically an URL is emailed to you to download the secure server certificate)

* Depending on the vendor, it can take a couple of hours to a few days.

* Send secure certificate to host for installation. (Send in plain text)

Once your web hosting provider receives this data they will produce the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have selected as your secure certificate authority. They will then create a SSL certificate for you which you will send back to your host for installation. Your internet host may possibly charge a fee for installation in addition to what your SSL certificate vendor charges.

Some thing to feel about:

If you have decided to obtain your own SSL certificate, you will want to choose how you want your URL to be referred to as. If you, as a rule, call your domain name in your coding managed pki as www.yourdomainname.com, then make positive you indicate epassports this to your host when you request a CSR from them. If you do not, and you get the certificate for yourdomainname.com (without having the www), this will cause browser errors, creating the certificate seem insecure, and you will require to alter your coding.

Always use your self or your firm as technical speak to.

How to tell if a website is secure?

Soon after you have browsed to a web site securely employing https:// in the URL, look on the lower appropriate hand side of your browser. You really should see a closed lock. This will tell you the website is secure.