We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [security-certificate]

Electronic document that proves ownership of a public key. E.g. for SSL connections.

Filter by
Sorted by
Tagged with
62
votes
5answers
8k views

Why should I pay for an SSL certificate?

I paid for an SSL certificate from Namecheap, I think it was certified by ComodoSSL. It cost me 7$, it took them a week to activate and I had to do it myself from SSH while editing my site's ...
39
votes
6answers
4k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm going ...
32
votes
7answers
42k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
30
votes
4answers
7k views

What are the benefits of a more expensive SSL certificate?

I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers. If we take http://www.namecheap.com/learn/other-services/ssl-...
29
votes
4answers
4k views

Is it a bad practice to use self-signed SSL certificates?

SSL certificates are pretty expensive for individuals, especially if you need to secure different subdomains. I am considering using self-signed certificates, as my primary focus is to secure the ...
26
votes
5answers
7k views

How do I get my site verified such that it shows a green box in Chrome's address bar?

How do I get my site verified by Google Chrome so it has the green box in the address bar? I honestly don't know how to do this. Also, do I have to ask Google to verify it?
26
votes
3answers
36k views

IIS 7 Require SSL automatically redirect to https://

I've configured IIS 7 to require SSL. I'm wondering if I can automatically redirect non-ssl requests to be encrypted. For example, if a user types in http://domain.com, can IIS redirect the request ...
25
votes
1answer
16k views

Which browsers support SNI?

Because of the way web servers and SSL work, previously a dedicated IP address was required for running an SSL certificate on a domain. But with a new technique (SNI, abbreviation for Server Name ...
23
votes
6answers
35k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
19
votes
2answers
23k views

How can my organization become a Root CA?

I'm the founder of a little non-profit French organization. Currently, we're providing free web and shell hosting. Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
17
votes
2answers
11k views

StartSSL certificate gives SEC_ERROR_REVOKED_CERTIFICATE in Firefox and ERR_CERT_AUTHORITY_INVALID in Chrome

My existing HTTPS certificate is expiring soon so I bought a new one. I'm having a very hard time installing it properly though. I have a wildcard certificate from StartSSL for *.deadsea....
17
votes
2answers
7k views

How to find domain registrar and DNS hosting with good DNSSEC support?

Simplified problem I want to buy a domain and make a website that is fully secured with DNSSEC. I want to make sure that only the one right SSL certificate could be validated by the browsers and all ...
16
votes
2answers
592 views

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
11
votes
6answers
878 views

SSL certificate provider

I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them? Thanks!
11
votes
4answers
713 views

Are free SSL certificates secure?

How is it that some SSL certificates are free? What does that mean? Are they secure or not?
11
votes
2answers
213 views

Choosing which domain to secure

We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
11
votes
2answers
2k views

Using wildcard certificates for multi-server deployment

Currently we are deploying a beta API for our services and we want that all request/responses from the API works over https. I'm confused about using wildcard certificates for both api and www urls. ...
9
votes
1answer
2k views

Should we get an EV Certificate?

Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
9
votes
4answers
611 views

Is GoDaddy SSL standard certificate compatible with all browsers?

Could you answer to at least one of these questions: Is GoDaddy SSL standard certificate compatible with all browsers (Chrome and Safari on iPhone, or Android browsers included)? http://www.godaddy....
8
votes
1answer
4k views

What happens to a user's browser if an SSL certificate is replaced in mid-session?

In light of modern browsers phasing out security certificates signed using the SHA1 hash algorithm, we're busy replacing all our SHA1 certificates with SHA2. Generally we could simply replace certs ...
8
votes
3answers
9k views

Will a simple domain validated SSL certificate show a 'green lock'?

I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
8
votes
2answers
819 views

Ad service that supports ssl (secure publishing)

Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
7
votes
3answers
212 views

What can I do to pay less for SSL?

I currently have a web hosting account and 27 domains that cost 1310 PLN (about $358.37) per year. Because the next version of Chrome will start displaying "not secure" warnings when a user enters ...
7
votes
3answers
615 views

How do I remove HTTPS results from Google after the domain has been redirected and the SSL certificate taken down?

I need to remove HTTPS results from Google search rankings for the domain A that has been redirected to another domain B. So domain A does not have any pages on it at the moment and it will not have ...
7
votes
2answers
390 views

Looking for SSL certificates (first time)

I need to buy SSL certificates and it is the first time. 1) My option would be the "cheapest ones". What am I going to risk, what kind of service quality I'm going to lose if I buy the cheapest ? Are ...
7
votes
3answers
581 views

Using wildcard certificates

Can I buy a wildcard certificate to use the same SSL certificate on multiple domains? For example, www.example.com, www.example.org and www.example.net (on different hosting services)? If I can, Is ...
7
votes
2answers
12k views

Comodo SSL Certificate showing as invalid on Android Devices

I run a website where I have full cpanel and limited whm access. I recently upgraded one of my domains to include SSL (A first-time experience for me). The certificates are installed in cpanel, and ...
7
votes
2answers
462 views

SSL Warranty - Meaningless?

Lots of SSL seem to come with a warranty: Extended Validation, Green Address Bar 40-bit minimum to 256-bit encryption USD $100,000 warranty VeriSign Trust™ Seal and services Has anyone in history ...
7
votes
2answers
863 views

Example of live site with trusted, signed but revoked certificate?

I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when ...
6
votes
4answers
6k views

Does SSL require a client side certificate of any kind at all?

A friend insists it does, that both browser and server both need certificates. I say no, only the server requires one, with two keys. The question is whether the browser uses some sort of certificate (...
6
votes
2answers
266 views

Do I need SSL for “Coming Soon” email signup form?

My website is a few months from going live, and marketing efforts are beginning. I would like to put up a short coming soon page with an email field to sign up for updates. Does this require an SSL ...
6
votes
2answers
6k views

Untrusted Cloudflare SSL Certificate

I'm just dipping my toes into the water with SSL certificates and figured I'd try Cloudflare's free offering... I'm trying to secure a sub-domain that hosts map tiles locally within the country for ...
6
votes
2answers
11k views

How do I transfer an SSL certificate to a new server

I have a site running on GoDaddy shared hosting, which is going to be moved over to a VPS. The site has a SSL certificate from GoDaddy. How can I move over the certificate in a seamless way, so that ...
6
votes
2answers
1k views

Check browser compatibility of SSL

I wanted to add SSL to my domain and as EV SSL is very expensive I'm going to go with DV SSL. because I just what to enable encrypted logins. Different companies offer different prices even free and ...
6
votes
2answers
292 views

Does https site needs extra configuration after installation of SSL certificate?

I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data). ...
6
votes
2answers
1k views

SSL Enforced by Redirect but how to support NON-SNI Browsers

I'd like my website to be SSL only but I'm faced with problem regarding the SSL certification not being supported on older browsers such as IE8, not that I care to much but wondering if there's away ...
6
votes
1answer
10k views

How to install mod_ssl for Apache

I have installed Apache httpd a while ago and have recently come back to it to try setup SSL and get it serving several different tomcat servers. At the moment I have two completely separate tomcat ...
6
votes
3answers
3k views

Can I have a SSL certificate for a domain name that redirects?

I have registered a domain name only for forwarding users to my original website. www.secondarydomain.example -> www.primarydomain.example I already have a SSL certificate for my primary domain. ...
5
votes
3answers
2k views

SSL certificate wildcard / single name - will it work for subdirectories?

I want to purchase an SSL certificate for my domain, but I have never worked with certificates. I will purchase it at DNSimple, my APP is on heroku and my domain is at all-inkl. Will the wildcard ...
5
votes
3answers
2k views

EV SSL Certificates - does anyone care? [closed]

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
5
votes
1answer
4k views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
5
votes
1answer
166 views

Schema links and HTTPS

In the process of moving to 100% HTTPS on a site, I performed a site-wide search for http:// in an effort to find potential problems. One common class of instances included schema links (certainly ...
5
votes
2answers
1k views

Why would my site load slower after I switched to https?

I bought and implemented an SSL certificate on my website and it seems to load a lot slower than before. Why does this happen and how can it be fixed?
5
votes
2answers
5k views

Performance: 4096 Bit RSA-Key compared to 2048 bit RSA-Key

Is there a comparison between 4096 Bit RSA-Key and a 2048 Bit RSA-Key? I'd like to know what impact on performance it has, if I'm choosing a 4096-Bit key for ssl-encryption. Is there any info which ...
5
votes
1answer
1k views

Does MSIE recognise StartCom as an SSL Certificate Authority?

Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one. One ...
5
votes
3answers
4k views

What is needed to add DNSSEC to my site?

What is needed to add DNSSEC to my site? Is it like HTTPS/SSL that I have to buy a certificate, or can I generate one myself to use? Is there any free way I can use DNSSEC or do I have to pay for ...
5
votes
3answers
390 views

SSL versus EV SSL

As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
5
votes
2answers
656 views

What are the benefits of requiring HTTPS between AWS CloudFront and the origin server?

I am hosting a website on Amazon CloudFront and we've recently updated the distribution to require HTTPS between CloudFront and viewers. With the introduction of AWS Certificate Manager and the ...
5
votes
3answers
5k views

Is it possible to share SSL certificates across servers?

We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
5
votes
1answer
17k views

Outlook 2016 says “The target principal name is incorrect” on my site's security certificate

I currently run a Plesk VPS, with 2 Domains hosted within. Some time ago, I had installed the 'Let's Encrypt' SSL Certificate onto my Plesk VPS. Both domains, successfully displayed the 'https' ...