SSL Certificates - Secure Server Certificates: Unterschied zwischen den Versionen

Version vom 19. August 2012, 09:03 Uhr

SSL certificates are normally used with ecommerce shopping carts, or epassports anywhere you want to collect info from a user securely on your website. If you use a secure server certificate with a form and that form emails the outcomes to you keep in thoughts that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link in between a web server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from...

What is SSL?

SSL certificates are normally utilized with ecommerce shopping carts, or anyplace you want to collect data from a user securely on your web site. If you use a secure server certificate with a form and that form emails the outcomes to you keep in thoughts that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link amongst a web server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a net server. A CSR looks like this:

-----Start NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----Finish NEW CERTIFICATE REQUEST-----

Very first, you want to choose whether to use your hosting shared SSL certificate if they offer it. The URL to your store will appear something like:

https://theirserver.com/youruserid/your/path/to/retailer.html

Or do you want to get your own SSL certificate? The URL will look like:

https://yourdomainname.com

If you determine to use your hosts' shared secure server certificate, then all you want to do is discover out the path you need to use to call your files securely, and you will be on your way.

If you determine to get your personal SSL certificate, this is typically what happens.

You initial need to have to determine who you are going to get your SSL certificate from. It is a great notion to make confident your host supports your distinct vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also evaluation many vendors at a glance at WhichSSL

Before finding your personal SSL certificate, you will need to have to do some reading on what your chosen Certificate Authority demands for a secure certificate, and you'll also need to have to come up with some documentation. There are a number of steps to acquiring a secure server certificate, once you have decided on a vendor.

This is an overview, not written in stone. Every CA is different, so cost of rsa securid make confident you read their documentation and what they demand. Here is an concept of what they want:

All documentation that is requested should match *exactly*. Secure certificate authorities will verify that your organization really exists, so they know they are issuing to the correct business. You will require to prove that the Organization Name and the Domain name are in fact yours to use.

Actions you'll be taking:

* Gather necessary documentation

* Have your host generate a CSR

* Full certificate authority on the web application

* Certificate authority will pki solution method your request

* Pickup and install your SSL certificate (normally an URL is emailed to you to download the secure server certificate)

* Depending on the vendor, it can take a few hours to a couple of days.

* Send secure certificate to host for installation. (Send in plain text)

Once your web hosting provider receives this information they will generate the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have selected as your secure certificate authority. They will then generate a SSL certificate for you which you will send back to your host for installation. Your internet host could charge a fee for installation in addition to what your SSL certificate vendor charges.

Some thing to consider about:

If you've decided to obtain your personal SSL certificate, you will need to choose how you want your URL to be named. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make positive you indicate this to your host when you request a CSR from them. If you don't, and you get the certificate for yourdomainname.com (with no the www), this will result in browser errors, creating the certificate appear insecure, and you will need to have to alter your coding.

Always use your self or your firm as technical speak to.

How to tell if a web site is secure?

After you have browsed to a web site securely making use of https:// in the URL, look on the lower correct hand side of your browser. You ought to see a closed lock. This will tell you the site is secure.