SSL Certificates - Secure Server Certificates

出典: くみこみックス

2012年7月29日 (日) 02:26の版

SSL certificates are typically employed with ecommerce shopping carts, or anywhere you want to collect details from a user securely on your internet site. If you use a secure server certificate with a form and that form emails the outcomes to you maintain in thoughts that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link among a internet server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from...

What is SSL?

SSL certificates are generally utilized with ecommerce shopping carts, or anyplace epassport you want to collect details from a user securely on your internet site. If you use a secure server certificate with a form and that form emails the outcomes to you preserve in mind that the email is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link among a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a net server. A CSR looks like this:

-----Begin NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----Finish NEW CERTIFICATE REQUEST-----

Initial, you require to make a decision regardless of whether to use your hosting shared SSL certificate if they offer it. The URL to your shop will look something like:

https://theirserver.com/youruserid/your/path/to/retailer.html

Or do you want to get your personal SSL certificate? The URL will appear like:

https://yourdomainname.com

If you decide to use your hosts' shared secure server certificate, then all you want to do is uncover out the path you need to have to use to call your files securely, and you will be on your way.

If you determine to get your personal SSL certificate, this is normally what takes place.

You first want to make a decision who you are going to get your SSL certificate from. It is a good notion to make positive your host supports your particular vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also assessment many vendors at a glance at WhichSSL

Just before getting your personal SSL certificate, you will want to do some reading on what your chosen Certificate Authority calls for for a secure certificate, and you will also want to come up with some documentation. There groupshare are many steps to getting a secure server certificate, when you have decided on a vendor.

This is an overview, not written in stone. Each CA is different, so make certain you read their documentation and what they call for. Here is an thought of what they want:

All documentation that is requested should match *specifically*. Secure certificate authorities will verify that your organization actually exists, so they know they are issuing to the appropriate firm. You idesktop credit suisse will need to have to prove that the Organization Name and the Domain name are in reality yours to use.

Steps you will be taking:

* Collect essential documentation

* Have your host produce a CSR

* Complete certificate authority online application

* Certificate authority will method your request

* Pickup and install your SSL certificate (usually an URL is emailed to you to download the secure server certificate)

* Based on the vendor, it can take a couple of hours to a few days.

* Send secure certificate to host for installation. (Send in plain text)

When your web hosting provider receives this data they will generate the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have selected as your secure certificate authority. They will then produce a SSL certificate for you which you will send back to your host for installation. Your web host might charge a fee for installation in addition to what your SSL certificate vendor charges.

A thing to feel about:

If you have decided to obtain your personal SSL certificate, you will want to decide how you want your URL to be called. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make sure you indicate this to your host when you request a CSR from them. If you don't, and you get the certificate for yourdomainname.com (with no the www), this will trigger browser errors, generating the certificate seem insecure, and you will need to have to modify your coding.

Usually use yourself or your company as technical speak to.

How to tell if a site is secure?

After you've browsed to a internet site securely employing https:// in the URL, appear on the lower proper hand side of your browser. You should see a closed lock. This will tell you the internet site is secure.