Tag Info

New answers tagged

0

I was working for a third party company on a web project for a large tech corporation. We used a GoDaddy SSL certificate and found that this CA was rejected on internal company networks. The corporation at that time (2 years ago) did not automatically accept GoDaddy as a trusted authority. It was only with much persuasion that our certificate was accepted. ...


3

It shouldn't. The unsecure warning comes about when a secured page incorporates non-secured elements. A canonical tag is a link, not an object to be incorporated into the page, so there's no reason why the padlock should care whether the URL it points to is http or https.


8

Web browsers do not care about canonical URLs. It is for search engine use only (specifically Google). Additionally, canonical URLs do not affect the loading or rendering of a web page. So no assets will be loaded over HTTP which is what would cause an insecure error message. So, no, they will not display any error message.


1

The web hosting company will issue a CSR for you and you have to submit this CSR at your SSL certificate provider. Once SSL is issued, you will have to provide SSL Certificate (provided by SSL provider) & the CA Bundle to your hosting provider. They will install it on your domain name. Note: For the SSL certificate, you will need to order a dedicated ...


1

You can buy your SSL certificate from any provider and then it is installed into your web hosting. When you purchase the SSL certificate, you specify the specific domain it is for. It is usually convenient to buy the SSL certificate from your web hosting provider as they may install it for you as part of the service, or at least be in a good position to ...


0

SSL certificates do not need to be transfered in the same way that domain names do. You can use the same certificate on multiple machines at the same time. The only reason to remove the certificate from your old Windows server would be to prevent it from falling into the wrong hands. You can test that your setup is working by visiting your site. If ...


1

EV/High Assurance SSL certs use unique object IDs that are inserted into the extended policy field of the SSL certificate. Most applications (browsers) that support EV-SSL have this OID and CA fingerprint hard coded into them. When they get a successful match, the browser then displays the extended data. You don't mention your usage case, but if this is ...


1

Yes, this approach will work. The information you enter when creating the CSR is all it contains. The resulting certificate can be imported to any certificate store and used for its intended purpose on any software, provided that any tools required to manage the certificate are present. For Windows Server, use the MMC Certificate Snap-in and choose the ...


0

Redirecting www to non-www is a pretty big change just to get an SSL cert working. Most CAs automatically issue certificates for both versions of a domain so I'm surprised they won't revoke that and re-issue it. Try contacting them again and keep insisting that they "revoke" the issued certificate and re-issue it with the www version of the domain. You ...



Top 50 recent answers are included