An SSL certificate (Secure Socket Layer Certificate) is an X.509 certificate that is issued for the purpose of identifying peers in an SSL connection. It is assigned to a domain or hosting account.

learn more… | top users | synonyms (2)

24
votes
5answers
2k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm ...
23
votes
4answers
3k views

Is it a bad practice to use self-signed SSL certificates?

SSL certificates are pretty expensive for individuals, especially if you need to secure different subdomains. I am considering using self-signed certificates, as my primary focus is to secure the ...
19
votes
3answers
3k views

What are the benefits of a more expensive SSL certificate?

I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers. If we take ...
15
votes
6answers
12k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
14
votes
6answers
19k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
14
votes
2answers
455 views

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
12
votes
3answers
17k views

IIS 7 Require SSL automatically redirect to https://

I've configured IIS 7 to require SSL. I'm wondering if I can automatically redirect non-ssl requests to be encrypted. For example, if a user types in http://domain.com, can IIS redirect the request ...
11
votes
2answers
186 views

Choosing which domain to secure

We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
10
votes
2answers
3k views

How to find domain registrar and DNS hosting with good DNSSEC support?

Simplified problem I want to buy a domain and make a website that is fully secured with DNSSEC. I want to make sure that only the one right SSL certificate could be validated by the browsers and all ...
9
votes
6answers
616 views

SSL certificate provider

I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them? Thanks!
9
votes
2answers
977 views

Using wildcard certificates for multi-server deployment

Currently we are deploying a beta API for our services and we want that all request/responses from the API works over https. I'm confused about using wildcard certificates for both api and www urls. ...
7
votes
4answers
524 views

free SSL certificates?

how comes that some SSL certificates are free ? What does that mean ? Are they secure or not ?
7
votes
2answers
345 views

Looking for SSL certificates (first time)

I need to buy SSL certificates and it is the first time. 1) My option would be the "cheapest ones". What am I going to risk, what kind of service quality I'm going to lose if I buy the cheapest ? Are ...
7
votes
2answers
410 views

Using wildcard certificates

Can I buy a wildcard certificate to use the same SSL certificate on multiple domains? For example, www.example.com, www.example.org and www.example.net (on different hosting services)? If I can, Is ...
7
votes
1answer
315 views

Should we get an EV Certificate?

Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
7
votes
2answers
670 views

Example of live site with trusted, signed but revoked certificate?

I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when ...
6
votes
2answers
235 views

Do I need SSL for “Coming Soon” email signup form?

My website is a few months from going live, and marketing efforts are beginning. I would like to put up a short coming soon page with an email field to sign up for updates. Does this require an SSL ...
6
votes
2answers
152 views

Does https site needs extra configuration after installation of SSL certificate?

I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data). ...
6
votes
2answers
341 views

SSL Warranty - Meaningless?

Lots of SSL seem to come with a warranty: Extended Validation, Green Address Bar 40-bit minimum to 256-bit encryption USD $100,000 warranty VeriSign Trust™ Seal and services Has anyone in history ...
6
votes
2answers
588 views

Ad service that supports ssl (secure publishing)

Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
5
votes
3answers
1k views

What is needed to add DNSSEC to my site?

What is needed to add DNSSEC to my site? Is it like HTTPS/SSL that I have to buy a certificate, or can I generate one myself to use? Is there any free way I can use DNSSEC or do I have to pay for ...
5
votes
3answers
310 views

SSL versus EV SSL

As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
5
votes
1answer
6k views

How to install mod_ssl for Apache

I have installed Apache httpd a while ago and have recently come back to it to try setup SSL and get it serving several different tomcat servers. At the moment I have two completely separate tomcat ...
5
votes
4answers
322 views

is godaddy SSL standard certificate compatible with *all* browsers?

Could you answer to at least one of these questions: 1) is godaddy SSL standard certificate compatible with all browsers (chrome and safari on iphone, or android browsers included) ? ...
4
votes
1answer
95 views

What makes a SSL certificate “signed”?

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
4
votes
2answers
357 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
3answers
3k views

Will a simple domain validated SSL certificate show a 'green lock'?

I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
4
votes
2answers
263 views

Would using a self-signed SSL certificate be appropriate in this scenario?

Now I realize this topic has been discussed in a few questions before (specifically this one), but I'm still a little confused about the implications of using a self-signed certificate, and how I ...
4
votes
1answer
103 views

How to promote the quality/security of your a website to your its customers?

Our organization is building a Drupal web platform that we aim at reselling as a cloud service. In order to provide our customers with maximum confidence in our solution, we're looking at ways of ...
4
votes
2answers
745 views

Is it possible to share SSL certificates across servers?

We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
4
votes
1answer
138 views

CPanel - Wild card SSL - How to point *.domain.com to one root and sub.domain.com to another root

I have a wildcard (*.domain.com) SSL certificate installed on my CPanel server. I have domain.com configured to point to /domain.com as its document root and use this wildcard SSL certificate. I ...
4
votes
3answers
108 views

What is SSL Hosting and what are the requirements for making secure transaction

I am here in order to collect the information for making secure online transaction. My client has got a online shopping site. We are now having cart in our own site and transfering the cart detail to ...
3
votes
2answers
205 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
3
votes
4answers
3k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
3
votes
4answers
6k views

Free (Or Cheap) Alternatives For An SSL Certificate For Facebook Apps [closed]

In October (from what I remember) Facebook will require HTTPS connections to pages and app's that are hosted away from Facebook. At the moment, it comes up with a popup saying "do you want to turn ...
3
votes
2answers
2k views

How can my organization become a Root CA?

I'm the founder of a little non-profit French organization. Currently, we're providing free web and shell hosting. Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
3
votes
1answer
291 views

How to add lock symbol to my website using private SSL in https pages

I just purchased SSL for my website from hostgator, so that I can add lock symbol in my website, when users visit https://www.mysite.com For example: Now they have installed the certificate, but ...
3
votes
1answer
787 views

Does MSIE recognise StartCom as an SSL Certificate Authority?

Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one. One ...
3
votes
3answers
733 views

SSL Certificate and IP Binding

I try to setup SSL on my server for only one web site (I have few there using IIS7). I bought an SSL certificate, installed it but when I come to bind I don't have to option to specify the host ...
3
votes
1answer
168 views

What would be a list of common website expenses?

For example: seo; web-development; site-maintenance; hosting; domain; ssl-certificate; etc. ___UPDATES___ FROM_ME: Stock-Photos; Logo; Legal; eCommerce_Shopping-Cart FROM_Lèse_majesté: ...
3
votes
1answer
116 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
401 views

What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?

For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server. https://domain.com leads to our website, with a proper SSL certificate ...
3
votes
1answer
101 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
110 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
3
votes
1answer
1k views

HTTPS iframe inside an HTTPS page

I'm developing a Wifi Homepage, which comes by default for all the users of the hotspot. In order to redirect them properly to my homepage, I'm using an SSL certificate, and the page is hosted ...
3
votes
1answer
30 views

What happens when a temporary self-signed SSL certificate is replaced with a trusted certificate?

My website is in beta stage. I am using a temporary self-signed SSL certificate with a short expiry date. Beta users have to add the exception on their browser to access HTTPS on my website. ...
3
votes
2answers
82 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
3
votes
1answer
922 views

Enabling SSL on Apache2 causes address already in use error

My server works just fine on a normal Apache2 install. Now, I'm trying to install subversion on this server using a guide I found on the net called: Installation of Subversion on Ubuntu, with Apache, ...
3
votes
4answers
615 views

is RapidSSL wildcard cert supported by major browsers?

I'm thinking of buying a wildcard SSL cert from clickSSL : http://www.clickssl.com/rapidssl/rapidsslwildcard.aspx That would be a rapidssl certificate, and I was looking into my firefox options to ...
3
votes
2answers
794 views

certificate for website login

Not sure if this belongs here or at serverfault... I've seen websites where, to login to the website, requires a digital certificate to be installed for the user logging in. As far as I can tell, ...