An SSL certificate (Secure Socket Layer Certificate) is an X.509 certificate that is issued for the purpose of identifying peers in an SSL connection. It is assigned to a domain or hosting account.

learn more… | top users | synonyms (2)

17
votes
6answers
14k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
0
votes
1answer
32 views

Cheap Positive SSL worths? [on hold]

Searching about cheap certificates, I saw that ssls.com offers a positive SSL certificate for $3.88 per year. Is this even possible? What is the difference to the positive SSL certificate from ...
1
vote
2answers
51 views

Can we use open SSL to generate certifiicates for 100 customer websites?

We have more then 100 customers and we need to set their websites up with SSL. Do we have to buy the SSL certificates from one of the companies (Godddy and etc) or we can use OpenSSL for free?
3
votes
1answer
49 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
1
vote
1answer
22 views

SSL certificate for server with 2 static ips

We have an apache server in our office premises which is used for some ssl related requests. The office premise has 2 internet connections with static ip address. The internet connections are switched ...
1
vote
1answer
52 views

Understanding the SHA1 sunset on SSL

According to this article: http://googleonlinesecurity.blogspot.co.uk/2014/09/gradually-sunsetting-sha-1.html SHA1 in SSL certificates will start reporting SSL errors to chrome browsers fairly soon. ...
7
votes
1answer
124 views

Which browsers support SNI?

Because of the way web servers and SSL work, previously a dedicated IP address was required for running an SSL certificate on a domain. But with a new technique (SNI, abbreviation for Server Name ...
2
votes
1answer
37 views

Set Up Of Common Name Of SSL Certificate To Protect Plesk Panel

A PCI Compliance scanner is balking that the self signed SSL certificate protecting secure access to Plesk Panel contains a name mismatch between the location of the Plesk Panel and the name on the ...
27
votes
5answers
2k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm ...
1
vote
1answer
83 views

Will a RapidSSL certificate prevent MITM attacks?

I am looking into buying a SSL certificate for my website. I have found a certificate available from RapidSSL. Will this certificate prevent a MITM attack? Will this certificate show warnings to ...
1
vote
2answers
33 views

Do I have to give my mailing address to create a certificate? [duplicate]

So, ICANN seems to require a mailing address for my domain, but my registrar (like many others) offers to proxy the mail to me to provide privacy. However, when I want to create an SSL certificate, ...
1
vote
0answers
104 views

Generate SHA-2 CSR in Plesk

Plesk can be used to generate CSR's for SSL certificates but uses SHA-1 as the hash by default. Browsers will soon prefer SHA-2 certificates, so I'd like to start using that for CSR hashing. How can ...
-1
votes
1answer
39 views

How to get a free signed secure certificate? [closed]

My web hosting service only provide non-free signed secure certificate. Is there a way I can get a free one on Internet?
1
vote
1answer
28 views

Does Google prefer 1-year SSL certificate over 3, 5-year SSL certificates?

I'm currently working on converting my company's site to SSL and the developer I'm working with asked if Google preferred 1-year certificates over 3-year certificates. I thought I vaguely remembered ...
1
vote
4answers
76 views

How can I make a browser trust my SSL certificate when I request resources from an external server?

I have installed an SSL certificate on one of my domains and it works perfectly, but on some pages I include a Google Font, which causes my certificate icon to change in: instead of: The reason, ...
12
votes
2answers
3k views

How to find domain registrar and DNS hosting with good DNSSEC support?

Simplified problem I want to buy a domain and make a website that is fully secured with DNSSEC. I want to make sure that only the one right SSL certificate could be validated by the browsers and all ...
1
vote
1answer
42 views

Redirecting HTTPS to HTTP without purchasing another IP address

So in the past I have always bought a new IP when working with SSL certs. I came across a client that is on a shared IP and using a cert for one of the sites but not the others. So domain #1 has cert ...
1
vote
0answers
27 views

How to install/update/upgrade SSL certificate in Tomcat?

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux ...
3
votes
2answers
104 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
16
votes
6answers
21k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
2
votes
1answer
158 views

www vs non-www ssl certificate?

We have a Drupal 6 shopping cart system that works fine on Apache/cPanel. We had an SSL cert for www.xyz.com through NS which expired 2 days ago. My boss called Network Solutions and they walked ...
3
votes
2answers
242 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
0
votes
2answers
41 views

Using SSL Certificates with shared hosting/different domain provider

I need to add a HTTPS address to an existing domain. Unfortunately there two companies involved: One for shared web-hosting, and one for the domain. How do SSL Certificated domains work in such ...
1
vote
1answer
16 views

How do I create a High Assurance Root Certificate Authority

I understand the basic nature of High Assurance Certificates. You pay more money for a certificate and the Certificate Authority investigates your company to a greater degree. After that occurs and ...
1
vote
1answer
17 views

Can I create CSR for Symantec EV SSL from another machine?

Given the additional checks to validate the organisation for the EV certificates, must the CSRs be created from the actual production web servers? In my capacity as a contractor, I thought I would ...
3
votes
2answers
86 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
2
votes
0answers
46 views

apache is not allowing me to use port number 443 in virtual tag for configuring apache for https service [closed]

I am trying to configure apache for https service in xampp , i am almost done i am jsut struggling with that virtual tag in which i have give information about my self-signed ssl-certificate and key ...
3
votes
1answer
35 views

What happens when a temporary self-signed SSL certificate is replaced with a trusted certificate?

My website is in beta stage. I am using a temporary self-signed SSL certificate with a short expiry date. Beta users have to add the exception on their browser to access HTTPS on my website. ...
0
votes
2answers
53 views

What is “SSL Server-Client Authentication”?

In comparing different SSL certificates I see "Server-Client Authentication" listed as a benefit of a paid certificate over a free one. (see it here) But what exactly is this added benefit that ...
0
votes
1answer
17 views

Installing a wildcard SSL Cert

I am in the process of putting the final touches to a rather complex multi-server setup where the server domain names are along the lines of srva.example.com, srvb.example.com etc. At present I have ...
0
votes
2answers
34 views

Multi-Domain SSL and redirections

I have one server with the main domain being: WebSiteA.com. I've got 2 others domains on the same server: WebSiteB.com and WebsiteC.com. I want to have one website architecture with 3 different ...
3
votes
1answer
121 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
1
vote
1answer
23 views

SSL website with non-SSL images only content delivery network

I am serving my own CDN using subdomains for static images only, and want to use a SSL cert on the main website. For example; https://www.example.com would download images from ...
2
votes
1answer
258 views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
1
vote
1answer
123 views

Does the server type matter when purchasing an SSL certificate from Network Solutions for NodeJS?

I am running an instance of ExpressJS using NodeJS and wish to have it start using HTTPS. My company purchases SSL certificates through Network Solutions. When trying to give them my CSR, Network ...
2
votes
1answer
120 views

SSL not working on home page

Recently set up a server for a client and installed a Comodo Positive SSL certificate. In firefox everywhere on the website I can see the padlock icon which shows the Comodo verification, except the ...
1
vote
0answers
52 views

Are there any usable free options for SSL certificates? [closed]

I'm aware that there are old questions in the same vein, but they're from ~2010 and everything has moved on a lot since then. Also, a caveat below excludes the common old answer. Background: I've got ...
1
vote
0answers
142 views

Migrate a ASP.NET web service from http to https. How to create a SSL certificate that works in test environment on IIS 7.5?

I have a question regarding a web service, http and https. First of all, there is a quite similar question with an accepted answer on StackOverflow. Like the questioner on SO, I have a simple working ...
3
votes
1answer
1k views

Enabling SSL on Apache2 causes address already in use error

My server works just fine on a normal Apache2 install. Now, I'm trying to install subversion on this server using a guide I found on the net called: Installation of Subversion on Ubuntu, with Apache, ...
0
votes
0answers
45 views

Problems with SSL certificate in IIS 8

I bought certificate only for name_domain.com under the configuration for IIS 8 (on Windows Server 2012). I have 301 redirects from www.name_domain.com to https://name_domain.com. If I open the ...
2
votes
2answers
652 views

EV SSL Certificates - does anyone care?

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
2
votes
3answers
139 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
1
vote
1answer
55 views

Why do CDNs charge so much for private SSL? [closed]

I've been looking at various CDN services, and many of them seem to charge a pretty hefty fee compared to the free shared SSL offering. One in particular, CDN77, is offering private SSL for $700/year. ...
1
vote
1answer
558 views

Getting SSL certificate for a sub-domain

Our company owns a domain say www.mycompany.com. I understand that it is trivial to get an SSL certificate for above domain since we do have a website running on that address. We want a certificate ...
1
vote
2answers
42 views

SSL issues on my website

I'm running a XenForo website and I am now getting SSL security issues. I'm not so experienced in SSL, so I'm hoping you guys can provide some clarity on them. I was thinking that they probably had ...
1
vote
1answer
62 views

Mixing self signed certs with traditional SSL

I have a traditional SSL cert going to a subdomain secure.mydomain.com on my domain. My host required me to have a dedicated IP in order to do this. I would also like to use HTTPS on my site for when ...
1
vote
1answer
126 views

Extra configuration needed after installing SSL certificate?

We recently developed two rather simple PHP applications for AXA (European bank). URL's are axa.tfo.be/incentives/cipres and axa.tfo.be/incentives/zrkk (access to both sites is restricted to visitors ...
1
vote
1answer
132 views

Can SSL Wildcards have multiple/nested levels of wildcard?

I know that an SSL wildcard certificate (*.example.org) can be used to support many names under the domain (a.example.org, b.example.org, c.example.org). I also know that the * is only good for ...
2
votes
1answer
265 views

Advice on buying SSL certificate [duplicate]

Possible Duplicate: SSL certificate provider What are the main things to consider when choosing between SSL certificates from different providers? I find they vary in price incredibly.
4
votes
1answer
153 views

CPanel - Wild card SSL - How to point *.domain.com to one root and sub.domain.com to another root

I have a wildcard (*.domain.com) SSL certificate installed on my CPanel server. I have domain.com configured to point to /domain.com as its document root and use this wildcard SSL certificate. I ...