ソースを表示

SSL certificates are normally utilised with ecommerce shopping carts, or anyplace you want to collect info from a user securely on your internet site. If you use a secure server certificate with a form and that form emails the outcomes to you preserve in thoughts that the e-mail is not secure.  SSL (Secure Sockets Layer): Creates an encrypted link amongst a web server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from...  What is SSL?  SSL certificates are normally utilised with ecommerce shopping carts, or anywhere you want to collect info from a user securely on your web site. If you use a secure server certificate with a form and that form emails the results to you maintain in thoughts that the e-mail is not secure.  SSL (Secure Sockets Layer): Creates an encrypted link between a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a internet server. A CSR looks like this:  -----Begin NEW CERTIFICATE REQUEST-----  MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB  AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl  L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o  -----Finish NEW CERTIFICATE REQUEST-----  Very first, you need to choose regardless of whether to use your hosting shared SSL certificate if they offer it. The URL to your retailer will look a thing like:  https://theirserver.com/youruserid/your/path/to/shop.html  Or do you want to get your own SSL certificate? The URL will appear like:  https://yourdomainname.com  If you decide to use your hosts' shared secure server certificate, then all you need to do is locate out the path you need to have to use to call your files securely, and you will be on your way.  If you make a decision to get your personal SSL certificate, this is normally what occurs.  You 1st need to make a decision who you are going to get your SSL certificate from. It is a very good idea to make sure your host supports your certain vendor. Some certificate authority vendors are:  * Thawte  * Verisign  * Comodo  * You can also review several vendors at a glance at WhichSSL  Just before obtaining your own SSL certificate, you will require to do some reading on what your selected Certificate Authority demands for a secure certificate, and you'll also require to come up with some documentation. There are a number of steps to purchasing a secure server certificate, when you have decided on a vendor.  This is an overview, not written in stone. Each and every CA is diverse, so make certain you read their documentation and what they demand. Right here is an concept of what they want:  All documentation that is requested ought to match *specifically*. Secure certificate authorities will verify that your organization actually exists, so they know they are issuing to the right company. You will need to have to prove that the Organization Name and the Domain name are in truth yours to use.  Actions you will be taking:  * Collect needed documentation  * Have your host create a CSR  * Total certificate authority on the internet application [http://www.entrust.comwww.entrust.com/products/ pki encryption]  * Certificate authority will process your request  * Pickup and install your SSL certificate (usually an URL is emailed to you to download the secure server certificate)  * Depending on the vendor, it can take a few hours to a few days.  * Send secure certificate to host for installation. (Send in plain text)  As soon as your net hosting provider receives this data they will create the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have chosen as your secure certificate authority. They will then produce a SSL certificate for you which you will send back to your host for installation. Your internet host could charge a fee for installation in addition to what your SSL certificate vendor charges.  One thing to think about:  If you have decided to acquire your personal SSL certificate, you will need to have to choose how you want your URL to be known as. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make sure you indicate this to your host when you request a CSR from them. If you do not, and you get the certificate for yourdomainname.com (without the www), this will cause browser errors, generating the certificate appear insecure, and you will want to alter your coding.  Always use yourself or your organization as technical speak to.  How to tell if a site is secure?  Right after you have browsed to a site securely employing https:// in the URL, look on the lower appropriate hand side of your browser. You should see a closed lock. This will tell you the site is secure.