An SSL certificate (Secure Socket Layer Certificate) is an X.509 certificate that is issued for the purpose of identifying peers in an SSL connection. It is assigned to a domain or hosting account.

learn more… | top users | synonyms (2)

2
votes
1answer
658 views

SSL between customer's domain having CNAME to our secured server?

We're setting up a payment service -- a few pages to collect credit cards, and do other stuff that needs to be secure. We would like to offer the service to customers via a cobranded page we serve ...
3
votes
1answer
1k views

HTTPS iframe inside an HTTPS page

I'm developing a Wifi Homepage, which comes by default for all the users of the hotspot. In order to redirect them properly to my homepage, I'm using an SSL certificate, and the page is hosted ...
14
votes
5answers
11k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
1
vote
1answer
44 views

Is it possible to view all previously issued SSL certificates for a particular domain?

If we wanted to know if a particular domain has had SSL certificates issued to it by CAs in the past, that are now revoked/expired, is there is a resource that has that information?
11
votes
3answers
16k views

IIS 7 Require SSL automatically redirect to https://

I've configured IIS 7 to require SSL. I'm wondering if I can automatically redirect non-ssl requests to be encrypted. For example, if a user types in http://domain.com, can IIS redirect the request ...
3
votes
4answers
3k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
4
votes
2answers
339 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
2
votes
1answer
204 views

SSL Certificate Works in Monit - But Not in Keystore

I have a situation where there's a keystore file with the various root/intermediate certificates stored in it in a way that it seems to work for most browsers. Problem is that when mobile browsers ...
6
votes
2answers
231 views

Do I need SSL for “Coming Soon” email signup form?

My website is a few months from going live, and marketing efforts are beginning. I would like to put up a short coming soon page with an email field to sign up for updates. Does this require an SSL ...
3
votes
1answer
100 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
1
vote
2answers
783 views

cname forward from https to http

We are migrating web host and I wonder if it is possible in the migration phase to do a CNAME forward from https://address1.com to http://address2.com. Would the certificate still work even if the new ...
2
votes
2answers
766 views

SSL 128bit… Why not 256bit

Have set up an SSL certificate for a new site, and in checking with the browser, the SSL states it's encrypted with 128bit encryption. I have tried with the latest versions of Chrome, IE9 and FF, all ...
4
votes
3answers
2k views

Will a simple domain validated SSL certificate show a 'green lock'?

I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
1
vote
1answer
66 views

Shared SSL certificate

I sit and look at the SSL certificates and web host.Direct what is the difference between a shared SSL certificate and other SSL certificates? Technically speaking.
1
vote
1answer
110 views

Extra configuration needed after installing SSL certificate?

We recently developed two rather simple PHP applications for AXA (European bank). URL's are axa.tfo.be/incentives/cipres and axa.tfo.be/incentives/zrkk (access to both sites is restricted to visitors ...
6
votes
2answers
145 views

Does https site needs extra configuration after installation of SSL certificate?

I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data). ...
1
vote
1answer
75 views

SSL certificate question

I'm looking into buying a SSL certificate for my website. I have found the following: http://www.rapidssl.com/buy-ssl/ssl-certificate/index.html Will this certificate prevent a MITM attack? Will ...
4
votes
2answers
258 views

Would using a self-signed SSL certificate be appropriate in this scenario?

Now I realize this topic has been discussed in a few questions before (specifically this one), but I'm still a little confused about the implications of using a self-signed certificate, and how I ...
2
votes
1answer
386 views

Error 500 on phpMyAdmin via https from “self-signed certificate”?

I have used Cpanel to generate and install a self-signed certificate for HTTPS and now that I have installed phpMyAdmin once I access phpMyAdmin via HTTPS it throws out an error 500 message. Why is ...
1
vote
1answer
196 views

Can I modify an existing certificate to run on multiple hostnames?

I've been investigating and I found instructions on how to create an SSL certificate with multiple hostnames, but I need to know whether I can modify an existing certificate (not create a new ...
2
votes
0answers
89 views

Has anyone ever claimed a warranty on an SSL certificate? [closed]

SSL certificates often advertise varying amounts of warranties or guarantees, for example $500,000 or $1m. My question is, in the history of SSL, has anyone ever actually successfully claimed one of ...
1
vote
3answers
475 views

Is RapidSSL WildCard Cert suitable for my eCommerce Web site?

We have recently launched our online T-Shirts shop which is based on eCommerce platform but certainly we have been facing problem of customer’s transactions security as they were asking for suitable ...
0
votes
2answers
363 views

SSL Certificate is Untrusted how to fix it

How can i fix the untrusted ? And why it appears ? What may cause this problem.This is in FF but in Chrome is red https with x marked on it.
3
votes
4answers
6k views

Free (Or Cheap) Alternatives For An SSL Certificate For Facebook Apps [closed]

In October (from what I remember) Facebook will require HTTPS connections to pages and app's that are hosted away from Facebook. At the moment, it comes up with a popup saying "do you want to turn ...
4
votes
1answer
92 views

What makes a SSL certificate “signed”?

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
4
votes
1answer
102 views

How to promote the quality/security of your a website to your its customers?

Our organization is building a Drupal web platform that we aim at reselling as a cloud service. In order to provide our customers with maximum confidence in our solution, we're looking at ways of ...
1
vote
1answer
104 views

Can I obtain trusted SSL certificates without giving out personal information?

I am launching a site that will require secure (ssl) account login, no payments or credit cards involved. Self signed certificates gives annoying warnings in browsers, so I want to get a trusted SSL ...
2
votes
2answers
309 views

SSL Certificate is Untrusted… sometimes

Web Designer I'm working with signed up a new client that needed an SSL certificate. We went to namecheap.com and purchased on from Comodo. Got all the needed files and set it up in ISPConfig. To ...
1
vote
0answers
53 views

Is this a legitimate tool to check for digital certificates? [closed]

I've been looking for a method to handle checking my domain for certificates that are in use, but my provider doesn't provide a tool to see how many are currently in use. I've stumbled upon the ...
6
votes
2answers
555 views

Ad service that supports ssl (secure publishing)

Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
3
votes
2answers
699 views

certificate for website login

Not sure if this belongs here or at serverfault... I've seen websites where, to login to the website, requires a digital certificate to be installed for the user logging in. As far as I can tell, ...
3
votes
1answer
377 views

SSL redirection

I want to redirect one of my domain hosted in a domain provider to a different server where I have a Tomcat based application installed. I have purchased SSL for the server with Tomcat installed. The ...
3
votes
3answers
704 views

SSL Certificate and IP Binding

I try to setup SSL on my server for only one web site (I have few there using IIS7). I bought an SSL certificate, installed it but when I come to bind I don't have to option to specify the host ...
13
votes
6answers
18k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
3
votes
1answer
1k views

How do I transfer an SSL certificate to a new server

I have a site running on GoDaddy shared hosting, which is going to be moved over to a VPS. The site has a SSL certificate from GoDaddy. How can I move over the certificate in a seamless way, so that ...
2
votes
2answers
89 views

Issue with security certificate name

I have inherited an old website whose security certificate causes this error when viewed with IE. "The name on the security certificate is invalid or does not match the name of the site" Is there ...
1
vote
2answers
252 views

SSL Configuration Problem

I've generated an SSL certificate with keytool: keytool -keystore keystore -alias mySite -genkey -keyalg RSA -keysize 2048 I got this configured and working fine, but obviously it wasn't signed by ...
1
vote
1answer
116 views

How do SSL certificate authorities verify domains?

What is a reasonable and reputable SSL certificate signing authority -- and how do they verify the domain in the simplest case? Do they simply send an email to the Technical Contact for the domain ...
7
votes
2answers
650 views

Example of live site with trusted, signed but revoked certificate?

I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when ...
1
vote
2answers
109 views

SSL Certification on both www and no-www domains

We've got our website running and HTTPS / SSL works just great. EXCEPT: when users enter http://www.mydomain.com and then enter the secure area and get directed to https://www.mydomain.com it works ...
1
vote
1answer
442 views

Are browsers supposed to automatically retrieve intermediate SSL certificates and do they?

I have recently encountered the following issue: a user couldn't access a website that was using an intermediate VeriSign certificate because it is no longer included in Firefox. Some sources claim ...
2
votes
1answer
245 views

Advice on buying SSL certificate [duplicate]

Possible Duplicate: SSL certificate provider What are the main things to consider when choosing between SSL certificates from different providers? I find they vary in price incredibly.
6
votes
2answers
331 views

SSL Warranty - Meaningless?

Lots of SSL seem to come with a warranty: Extended Validation, Green Address Bar 40-bit minimum to 256-bit encryption USD $100,000 warranty VeriSign Trustâ„¢ Seal and services Has anyone in history ...
4
votes
1answer
5k views

How to install mod_ssl for Apache

I have installed Apache httpd a while ago and have recently come back to it to try setup SSL and get it serving several different tomcat servers. At the moment I have two completely separate tomcat ...
1
vote
1answer
131 views

fully encrypt website using SSL

I had been trying to use SSL for the following site http://bit.ly/e8Lj32 , although the SSL certificate is signed properly by networksolutions , each time the pages are loaded it still displays an ...
2
votes
1answer
89 views

What is recommended - UC or EV or EV UC certificate? [closed]

We are implementing Exchange 2010 server and an eCommerce site. Both of these need certificates and I am confused what to use? I know Exchange need UC certificate. Can I use it for the ecommerce site ...
3
votes
2answers
2k views

How can my organization become a Root CA?

I'm the founder of a little non-profit French organization. Currently, we're providing free web and shell hosting. Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
0
votes
1answer
446 views

Example sites which use UCC certificates

Can anyone point me to a few sites that make use of a UCC (SAN) certificates? I tried to search for this but found a lot of information about UCC certficates without any examples. As a sanity check ...
1
vote
3answers
7k views

Getting “cannot verify server identity” on iPhone and iPad for Go Daddy SSL

Whenever people navigate to a particular site of ours on an iPhone or iPad they are getting a "cannot verify server identity" message. Our certificate was issued by Go Daddy. I ran this checker as ...
0
votes
1answer
142 views

Why does my certificate provider ask me to disable its root certificate?

I received an SSL certificate from GoDaddy yesterday and their instructions to install the certificate seemed weird. To be precise, they asked me to disable their root certificate in server. NOTE: ...