3

My website is in beta stage. I am using a temporary self-signed SSL certificate with a short expiry date. Beta users have to add the exception on their browser to access HTTPS on my website. Subsequently, I will be replacing the certificate with a trusted one from a Certificate Authority.

Upon replacement of the self-signed certificate with a trusted certificate, do these beta users need to do anything to access my site on HTTPS, such as deleting the self-signed certificate on their browser manually?

1

When you get a genuine certificate, you can replace your self-signed certificate and not worry about your users. Any user that had previously accepted the self signed certificate will be able to view the site with the genuine certificate without taking any special actions. They will not have to delete their acceptance of the self-signed certificate.

  • 2
    Note that in high security environments, I do recommend users purge such test certificates. You don't want any legacy certificates laying about that could be potentially confused for production ones. – jeffatrackaid Jun 24 '14 at 18:25
  • Thanks for the assurance. Can you provide a reason why you say so? – Question Overflow Jun 25 '14 at 1:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.