[Concise] Request for a certificate

The main requirements for the application of SSL certificates are the following 3 steps: 1, the production of CSR documents. The CSR is the certificate signing request certificate requests file. This file is made by the applicant, in the production at the same time, the system will produce 2 keys, one is the public key is this CSR file, the other is the private key, stored on the server. To make a CSR file, the applicant can refer to the Web server's documentation, general Apache, etc., using the OpenSSL command line to generate KEY+CSR2 files, Tomcat,jboss,resin, and so on, using Keytool to generate JKS and CSR files, IIS creates a pending request and a CSR file through the wizard. 2, CA certification. CSR will be submitted to the CA,CA general has 2 kinds of authentication methods: 1, Domain name authentication, generally through the Administrator mailbox authentication way, this way certification speed, but issued certificates do not have the name of the enterprise, 2, Enterprise document certification, the need to provide business license. It usually takes 3-5 working days. There is also a need to authenticate the above 2 ways of certification, called EV certificate, this certificate can make IE7 above the browser address bar into green, so the certification is also the most stringent. 3, the installation of certificates. After you receive the CA's certificate, you can deploy the certificate to the server, and the generic Apache file directly copies the Key+cer to the file. Then modify the httpd.conf file, Tomcat, and so on, you need to import the certificate CER file issued by the CA into the JKs file, copy the server, and then modify the Server.xml;iis to process the pending request to import the CER file.