Questions tagged [security-certificate]

Electronic document that proves ownership of a public key. E.g. for SSL connections.

Filter by
Sorted by
Tagged with
68 votes
5 answers
11k views

Why should I pay for an SSL certificate?

I paid for an SSL certificate from Namecheap, I think it was certified by ComodoSSL. It cost me 7$, it took them a week to activate and I had to do it myself from SSH while editing my site's ...
user avatar
40 votes
6 answers
4k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm going ...
user avatar
33 votes
7 answers
46k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
user avatar
32 votes
4 answers
9k views

What are the benefits of a more expensive SSL certificate?

I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers. If we take http://www.namecheap.com/learn/other-services/ssl-...
user avatar
  • 423
30 votes
1 answer
26k views

Which browsers support SNI?

Because of the way web servers and SSL work, previously a dedicated IP address was required for running an SSL certificate on a domain. But with a new technique (SNI, abbreviation for Server Name ...
user avatar
  • 2,343
30 votes
4 answers
5k views

Is it a bad practice to use self-signed SSL certificates?

SSL certificates are pretty expensive for individuals, especially if you need to secure different subdomains. I am considering using self-signed certificates, as my primary focus is to secure the ...
user avatar
  • 1,587
27 votes
5 answers
7k views

How do I get my site verified such that it shows a green box in Chrome's address bar?

How do I get my site verified by Google Chrome so it has the green box in the address bar? I honestly don't know how to do this. Also, do I have to ask Google to verify it?
user avatar
27 votes
3 answers
37k views

IIS 7 Require SSL automatically redirect to https://

I've configured IIS 7 to require SSL. Can I automatically redirect non-SSL requests to be encrypted? For example, if a user types in http://domain.example, can IIS redirect the request to https://...
user avatar
  • 403
23 votes
6 answers
35k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
user avatar
  • 1,773
23 votes
2 answers
31k views

How can my organization become a Root CA?

I'm the founder of a little non-profit French organization. Currently, we're providing free web and shell hosting. Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
user avatar
  • 355
18 votes
2 answers
12k views

StartSSL certificate gives SEC_ERROR_REVOKED_CERTIFICATE in Firefox and ERR_CERT_AUTHORITY_INVALID in Chrome

My existing HTTPS certificate is expiring soon so I bought a new one. I'm having a very hard time installing it properly though. I have a wildcard certificate from StartSSL for *.deadsea....
user avatar
17 votes
2 answers
8k views

How to find domain registrar and DNS hosting with good DNSSEC support?

Simplified problem I want to buy a domain and make a website that is fully secured with DNSSEC. I want to make sure that only the one right SSL certificate could be validated by the browsers and all ...
user avatar
  • 421
16 votes
2 answers
616 views

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
user avatar
  • 3,723
11 votes
6 answers
970 views

SSL certificate provider

I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them? Thanks!
user avatar
  • 1,023
11 votes
4 answers
759 views

Are free SSL certificates secure?

How is it that some SSL certificates are free? What does that mean? Are they secure or not?
user avatar
  • 1,847
11 votes
2 answers
246 views

Choosing which domain to secure

We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
user avatar
11 votes
2 answers
2k views

Using wildcard certificates for multi-server deployment

Currently we are deploying a beta API for our services and we want that all request/responses from the API works over https. I'm confused about using wildcard certificates for both api and www urls. ...
user avatar
  • 399
10 votes
1 answer
7k views

What happens to a user's browser if an SSL certificate is replaced in mid-session?

In light of modern browsers phasing out security certificates signed using the SHA1 hash algorithm, we're busy replacing all our SHA1 certificates with SHA2. Generally we could simply replace certs ...
user avatar
  • 394
10 votes
1 answer
3k views

Should we get an EV Certificate?

Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
user avatar
9 votes
4 answers
3k views

Do I have to pay a web hosting company for an SSL certificate?

I want to be able to host HTTPS in addition to HTTP and I thought I could simply buy a low cost SSL certificate and copy the certificate to my hosted website? But my service provider has a variety of ...
user avatar
9 votes
4 answers
10k views

Does SSL require a client side certificate of any kind at all?

A friend insists it does, that both browser and server both need certificates. I say no, only the server requires one, with two keys. The question is whether the browser uses some sort of certificate (...
user avatar
  • 227
9 votes
4 answers
836 views

Is GoDaddy SSL standard certificate compatible with all browsers?

Could you answer to at least one of these questions: Is GoDaddy SSL standard certificate compatible with all browsers (Chrome and Safari on iPhone, or Android browsers included)? http://www.godaddy....
user avatar
  • 1,847
8 votes
2 answers
29k views

Do I need a certificate to redirect via CNAME?

I have abc.example.com that is being shut down and all data was sent via SSL. I have xyz.example.com already live and pure SSL site. I am changing record (CNAME) for abc.example.com to point to xyz....
user avatar
  • 424
8 votes
3 answers
10k views

Performance: 4096 Bit RSA-Key compared to 2048 bit RSA-Key

Is there a comparison between 4096 Bit RSA-Key and a 2048 Bit RSA-Key? I'd like to know what impact on performance it has, if I'm choosing a 4096-Bit key for ssl-encryption. Is there any info which ...
user avatar
  • 181
8 votes
3 answers
9k views

Will a simple domain validated SSL certificate show a 'green lock'?

I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
user avatar
  • 1,324
8 votes
2 answers
834 views

Ad service that supports ssl (secure publishing)

Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
user avatar
7 votes
3 answers
231 views

What can I do to pay less for SSL?

I currently have a web hosting account and 27 domains that cost 1310 PLN (about $358.37) per year. Because the next version of Chrome will start displaying "not secure" warnings when a user enters ...
user avatar
7 votes
2 answers
8k views

Untrusted Cloudflare SSL Certificate

I'm just dipping my toes into the water with SSL certificates and figured I'd try Cloudflare's free offering... I'm trying to secure a sub-domain that hosts map tiles locally within the country for ...
user avatar
  • 348
7 votes
3 answers
998 views

How do I remove HTTPS results from Google after the domain has been redirected and the SSL certificate taken down?

I need to remove HTTPS results from Google search rankings for the domain A that has been redirected to another domain B. So domain A does not have any pages on it at the moment and it will not have ...
user avatar
  • 71
7 votes
2 answers
397 views

Looking for SSL certificates (first time)

I need to buy SSL certificates and it is the first time. 1) My option would be the "cheapest ones". What am I going to risk, what kind of service quality I'm going to lose if I buy the cheapest ? Are ...
user avatar
  • 1,847
7 votes
3 answers
659 views

Using wildcard certificates

Can I buy a wildcard certificate to use the same SSL certificate on multiple domains? For example, www.example.com, www.example.org and www.example.net (on different hosting services)? If I can, Is ...
user avatar
  • 1,847
7 votes
2 answers
13k views

Comodo SSL Certificate showing as invalid on Android Devices

I run a website where I have full cpanel and limited whm access. I recently upgraded one of my domains to include SSL (A first-time experience for me). The certificates are installed in cpanel, and ...
user avatar
  • 71
7 votes
2 answers
476 views

SSL Warranty - Meaningless?

Lots of SSL seem to come with a warranty: Extended Validation, Green Address Bar 40-bit minimum to 256-bit encryption USD $100,000 warranty VeriSign Trust™ Seal and services Has anyone in history ...
user avatar
  • 2,370
7 votes
2 answers
991 views

Example of live site with trusted, signed but revoked certificate?

I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when ...
user avatar
  • 171
6 votes
2 answers
276 views

Do I need SSL for "Coming Soon" email signup form?

My website is a few months from going live, and marketing efforts are beginning. I would like to put up a short coming soon page with an email field to sign up for updates. Does this require an SSL ...
user avatar
  • 197
6 votes
2 answers
14k views

How do I transfer an SSL certificate to a new server

I have a site running on GoDaddy shared hosting, which is going to be moved over to a VPS. The site has a SSL certificate from GoDaddy. How can I move over the certificate in a seamless way, so that ...
user avatar
  • 287
6 votes
2 answers
1k views

Check browser compatibility of SSL

I wanted to add SSL to my domain and as EV SSL is very expensive I'm going to go with DV SSL. because I just what to enable encrypted logins. Different companies offer different prices even free and ...
user avatar
6 votes
2 answers
302 views

Does https site needs extra configuration after installation of SSL certificate?

I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data). ...
user avatar
  • 171
6 votes
2 answers
2k views

SSL Enforced by Redirect but how to support NON-SNI Browsers

I'd like my website to be SSL only but I'm faced with problem regarding the SSL certification not being supported on older browsers such as IE8, not that I care to much but wondering if there's away ...
user avatar
  • 32.6k
6 votes
1 answer
10k views

How to install mod_ssl for Apache

I have installed Apache httpd a while ago and have recently come back to it to try setup SSL and get it serving several different tomcat servers. At the moment I have two completely separate tomcat ...
user avatar
6 votes
3 answers
13k views

Can I have a SSL certificate for a domain name that redirects?

I have registered a domain name only for forwarding users to my original website. www.secondarydomain.example -> www.primarydomain.example I already have a SSL certificate for my primary domain. ...
user avatar
6 votes
2 answers
845 views

What are the benefits of requiring HTTPS between AWS CloudFront and the origin server?

I am hosting a website on Amazon CloudFront and we've recently updated the distribution to require HTTPS between CloudFront and viewers. With the introduction of AWS Certificate Manager and the ...
user avatar
  • 65
6 votes
2 answers
4k views

301 Redirect Causes Insecure Connection Warning

My client's primary domain name is a variant of a commonly spelled name, for example domein.com. To avoid losing traffic, they also purchased domain.com. The live site is at https://domein.com. When I ...
user avatar
5 votes
3 answers
3k views

SSL certificate wildcard / single name - will it work for subdirectories?

I want to purchase an SSL certificate for my domain, but I have never worked with certificates. I will purchase it at DNSimple, my APP is on heroku and my domain is at all-inkl. Will the wildcard ...
user avatar
  • 163
5 votes
3 answers
18k views

In what path I can find the .crt file for Let's Encrypt SSL?

I'm trying to find the SSL .crt file that was installed on my Ubuntu server using Let's Encrypt. I used this commands below for installing Let's Encrypt free SSL: $sudo apt-get update $sudo apt-get ...
user avatar
5 votes
3 answers
2k views

EV SSL Certificates - does anyone care? [closed]

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
user avatar
  • 151
5 votes
1 answer
4k views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
user avatar
  • 697
5 votes
1 answer
188 views

Schema links and HTTPS

In the process of moving to 100% HTTPS on a site, I performed a site-wide search for http:// in an effort to find potential problems. One common class of instances included schema links (certainly ...
user avatar
  • 153
5 votes
2 answers
568 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
user avatar
5 votes
2 answers
3k views

Why would my site load slower after I switched to https?

I bought and implemented an SSL certificate on my website and it seems to load a lot slower than before. Why does this happen and how can it be fixed?
user avatar

1
2 3 4 5
7