SSL Certificates - Secure Server Certificates

出典: くみこみックス

2012年7月27日 (金) 01:49の版

SSL certificates are typically used with ecommerce shopping carts, or anyplace you want to collect details from a user securely on your web site. If you use a secure server certificate with a form and that form emails the results to you preserve in thoughts that the email is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link between a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from...

What is SSL?

SSL certificates are usually utilised with ecommerce shopping carts, or anywhere you want to collect information from a user securely on your internet site. If you use a secure server certificate with a form and that form emails the outcomes to you maintain in mind that the email is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link between a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by software authentication a net server. A CSR looks like this:

-----Start NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----End NEW CERTIFICATE REQUEST-----

First, you want to determine no matter whether to use your hosting shared SSL certificate if they provide it. The URL to your store will appear a thing like:

https://theirserver.com/youruserid/your/path/to/retailer.html

Or do you want to get your personal SSL certificate? The URL will look like:

https://yourdomainname.com

If you choose to use your hosts' shared secure server certificate, then all you need to have to do is discover out the path you need to use to call your files securely, and you will be on your way.

If you determine to get your own SSL certificate, this is normally what takes place.

You 1st want to choose who you are going to get your SSL certificate from. It is a good thought to make confident your host supports your certain vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also assessment many vendors at a glance at WhichSSL

Just before finding your own SSL certificate, you will need to do some reading on what your selected Certificate Authority calls for for a secure certificate, and you'll also need to have to come up with some documentation. There are many actions to purchasing a secure server certificate, as soon as you have decided on a vendor.

This is an overview, not written in stone. entrust Every single CA is different, so make sure you read their documentation and what they demand. Right here is an idea of what they want:

All documentation that is requested should match *exactly*. Secure certificate authorities will verify that your organization really exists, so they know they are issuing to the appropriate firm. You will need to prove that the Organization Name and the Domain name are in reality yours to use.

Steps you'll be taking:

* Collect required documentation

* Have your host generate a CSR

* Total certificate authority online application

* Certificate authority will method your request

* Pickup and install your SSL certificate (usually an URL is emailed to you to download the secure server certificate)

* Depending on the vendor, it can take a couple of hours to a couple of days.

* Send secure certificate to host for installation. (Send in plain text)

As soon as your web hosting provider receives this information they will create the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have chosen as your secure certificate authority. They will then create a SSL certificate for you which you will send back to your host for installation. Your web host might charge a fee for installation in addition to what your SSL certificate vendor charges.

A thing to believe about:

If you have decided to obtain your own SSL certificate, you will need to have to determine how you want your URL to be named. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make certain you indicate this to your host when you request a CSR network authentication from them. If you do not, and you get the certificate for yourdomainname.com (without having the www), this will cause browser errors, generating the certificate appear insecure, and you will want to adjust your coding.

Usually use yourself or your company as technical make contact with.

How to tell if a web site is secure?

Right after you have browsed to a internet site securely making use of https:// in the URL, appear on the lower correct hand side of your browser. You should see a closed lock. This will tell you the site is secure.