SSL Certificates - Secure Server Certificates

出典: くみこみックス

2012年8月2日 (木) 19:41の版

SSL certificates epassports are typically utilized with ecommerce shopping carts, or anyplace you want to collect details from a user securely on your web site. If you use a secure server certificate with a form and that form emails the outcomes to you keep in thoughts that the email is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link among a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server 2 factor authentication certificate from...

What is SSL?

SSL certificates are normally used with ecommerce shopping carts, or anywhere you want to collect information from a user securely on your website. If you use a secure server certificate with a form and that form emails the results to you keep in thoughts epassport that the e-mail is not secure.

SSL (Secure Sockets Layer): Creates an encrypted link in between a net server and a browser. CA (Certificate Authority): The vendor you will get the secure server certificate from CSR (Certificate Signing Request): A text file generated by a web server. A CSR looks like this:

-----Start NEW CERTIFICATE REQUEST-----

MIIDGgBNAGkAYwByAG8AcwBvAGYAdAAgAFIAUwBBACAAUwB

AG4AZQBsACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwl

L0ygNwwNIvKLMPq4/LcUkZ9Oo4AssXW5mvvhHWGz2RWYRhrw8o

-----End NEW CERTIFICATE REQUEST-----

1st, you require to make a decision whether or not to use your hosting shared SSL certificate if they provide it. The URL to your store will appear a thing like:

https://theirserver.com/youruserid/your/path/to/store.html

Or do you want to get your personal SSL certificate? The URL will look like:

https://yourdomainname.com

If you make a decision to use your hosts' shared secure server certificate, then all you need to do is discover out the path you need to use to call your files securely, and you will be on your way.

If you decide to get your own SSL certificate, this is generally what occurs.

You initial need to choose who you are going to get your SSL certificate from. It is a very good idea to make sure your host supports your particular vendor. Some certificate authority vendors are:

* Thawte

* Verisign

* Comodo

* You can also critique a number of vendors at a glance at WhichSSL

Before acquiring your personal SSL certificate, you will want to do some reading on what your selected Certificate Authority requires for a secure certificate, and you'll also require to come up with some documentation. There are many steps to buying a secure server certificate, when you have decided on a vendor.

This is an overview, not written in stone. Every CA is various, so make certain you read their documentation and what they require. Right here is an notion of what they want:

All documentation that is requested must match *precisely*. Secure certificate authorities will verify that your organization in fact exists, so they know they are issuing to the correct firm. You will want to prove that the Organization Name and the Domain name are in fact yours to use.

Steps you will be taking:

* Collect required documentation

* Have your host create a CSR

* Full certificate authority online application

* Certificate authority will procedure your request

* Pickup and install your SSL certificate (typically an URL is emailed to you to download the secure server certificate)

* Based on the vendor, it can take a few hours to a few days.

* Send secure certificate to host for installation. (Send in plain text)

When your internet hosting provider receives this information they will generate the CSR and send it back to you in plain text. You then send it on to Verisign or Thawte, or whoever you have selected as your secure certificate authority. They will then produce a SSL certificate for you which you will send back to your host for installation. Your net host may charge a fee for installation in addition to what your SSL certificate vendor charges.

Something to believe about:

If you've decided to buy your own SSL certificate, you will need to have to choose how you want your URL to be named. If you, as a rule, call your domain name in your coding as www.yourdomainname.com, then make positive you indicate this to your host when you request a CSR from them. If you do not, and you get the certificate for yourdomainname.com (without the www), this will cause browser errors, producing the certificate seem insecure, and you will need to have to adjust your coding.

Always use your self or your firm as technical speak to.

How to tell if a website is secure?

After you've browsed to a website securely employing https:// in the URL, appear on the lower right hand side of your browser. You must see a closed lock. This will tell you the web site is secure.