What is SSL?
SSL stands for Secure Sockets Layer. It is an encryption layer that encodes information that is exchanged between a client and a server, protecting the transmission of sensitive and private data.
Why do I need an SSL certificate for my site?
If your site sends or receives sensitive information, including accepting payment information, account information, or if your site includes a log-on feature, then your site should be secured with a certificate. Other applications of SSL Certificates include sites that utilize an API, database, and email.
How does SSL work?
An SSL certificate is a file installed on the web server that a web site is running on. This file is composed of two segments. The first is the public key, which encrypts data. The second is the private key, which decrypts data. When a client, such as a web browser, connects to an SSL secured server a unique session is created using these two keys. All data transmitted during this session is protected, and cannot be decrypted by any party other than that specific client and the server.
What is the difference between a domain validation certificate and higher assurance certificates?
Higher assurance certificates such as Organization Validation and Extended Validation require the certificate authority (the company issuing the certificate, such as GeoTrust or VeriSign) to verify the purchaser's business and their authority to purchase a certificate on behalf of that company. Domain Validation certificates only verify the domain ownership of the purchaser, and thus have much faster turnaround times since none of the additional information needs to be verified.
What benefit is there to purchasing a higher assurance certificate?
Low assurance certificates that perform domain only verification only encrypt the connection. Higher assurance certificates perform the same encryption, with the addition of the peace of mind for your visitors knowing that the certificate authority has already validated your site as belonging to a legitimate business.
How many domain names does a certificate secure?
The SBS certificates support the domain name and the "www" record. For GeoTrust and Verisign, you can only secure one domain name per certificate. Wildcard certificates are an exception. A wildcard certificate will secure the root domain, and all sub-domains associated with that domain.
Do SSL certificates work in all web browsers?
SSL Certificates are compatible with 99.9% of all browsers, including all major web browsers.
What is a CA?
CA stands for Certificate Authority. A CA is the company issuing the certificate that does all of the verification involved and provides the certificate to the purchaser.
I changed web servers, and my certificate no longer works. Can I get the certificate reissued?
Yes. On your new web server, generate a new CSR for your certificate. For most CAs, you can contact them directly with the new CSR and they will provide you with a new certificate. |