SSL Certificates - Secure Server Certificates

SSL certificates are usually utilised with ecommerce shopping carts, or anyplace you want to collect details from a user securely on your website. If you use a secure server certificate with a form and that form emails the outcomes to you preserve in mind that the email is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link in between a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from...

What is SSL?

SSL certificates are usually used with ecommerce shopping carts, or anyplace you want to collect info from a user securely on your web site. If you use a secure server certificate with a form and that form emails the outcomes to you keep in thoughts that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link between a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a net server. A CSR looks like this:

-----Begin NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----End NEW CERTIFICATE REQUEST-----

First, you require to make a decision regardless of whether to use your hosting shared SSL certificate if they supply it. The URL entrust desktop solutions to your store will appear one thing like:

https://theirserver.com/youruserid/your/path/to/retailer.html

Or do you want to get your own SSL certificate? The URL will appear like:

https://yourdomainname.com

If you determine to use your hosts' shared secure server certificate, then all you require to do is discover out the path you need to use to call your files securely, and you will be on your way.

If you determine to get your personal SSL certificate, this is usually what occurs.

You first need to have to decide who you are going to get your SSL certificate from. It is a great thought to make positive your host supports your specific vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also evaluation several vendors at a glance at WhichSSL

Before obtaining your own SSL certificate, you will require to do some reading on what your selected Certificate Authority needs for a secure certificate, and you will also need to come up with some documentation. There are many steps to getting a secure server certificate, once you have decided on a vendor.

This is an overview, not written in stone. Each CA is different, so make sure you read their documentation and what they need. Here is an thought of what they want:

All documentation that is requested should match *exactly*. Secure certificate two factor authentication authorities will verify that your organization actually exists, so they know they are issuing to the right organization. You will want to prove that the Organization Name and the Domain name are in truth yours to use.

Actions you will be taking:

* Gather necessary documentation

* Have your host produce a CSR

* Complete certificate pki cards authority on the web application

* Certificate authority will process your request

* Pickup and install your SSL certificate (generally an URL is emailed to you to download the secure server certificate)

* Depending on the vendor, it can take a few hours to a handful of days.

* Send secure certificate to host for installation. (Send in plain text)

Once your net hosting provider receives this data they will produce the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have chosen as your secure certificate authority. They will then generate a SSL certificate for you which you will send back to your host for installation. Your net host might charge a fee for installation in addition to what your SSL certificate vendor charges.

One thing to feel about:

If you've decided to purchase your own SSL certificate, you will want to make a decision how you want your URL to be referred to as. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make positive you indicate this to your host when you request a CSR from them. If you do not, and you get the certificate for yourdomainname.com (with out the www), this will lead to browser errors, creating the certificate appear insecure, and you will require to change your coding.

Usually use your self or your firm as technical make contact with.

How to tell if a website is secure?

Right after you have browsed to a website securely making use of https:// in the URL, look on the lower right hand side of your browser. You must see a closed lock. This will tell you the site is secure.