SSL Certificate FAQs

1. Will the SSL Certificate affect the speed and traffic?

 

Encryption and decryption for each SSL connection will increase the processing workload of the server CPU. Considering the protection of customer privacy and security, according to relevant surveys, deploying SSL certificates of well-known brands on important pages not only will not lose customers, but will effectively promote customer transactions.

 

For better useSSL CertificateFor more information, see the following:

 

(1) only use SSL for pages to be encrypted. For example, if you log on to a page or you want to submit customer dataVerisignDynamic signatures, prompting the customer that the website is secure and trustworthy.

 

(2) Try not to design large image files and other large files on pages using the verisignssl certificate, and try to use concise text pages. The consumer is prompted by text or Verisign dynamic sign, and the page is inVerisign CertificateSecurity protection status.

 

If the website transaction volume or traffic volume is very large, tianwei integrity recommends that you purchase an SSL Acceleration card to perform SSL encryption and decryption, so that the server does not have any burden. In addition, adding servers is also a good choice.

 

2. Do I need to install third-party plug-ins for two-way SSL certificate authentication?

 

Common webserver middleware supports client authentication. to configure an SSL certificate, you only need to modify the configuration file to enable the client authentication function without installing third-party plug-ins.

 

3. Can I install an SSL certificate on a hosted server?

 

More than 99% of servers and Client browsers support SSL. Generally, the application server certificate can be installed on a VM, but whether or not the server certificate can be installed depends on whether the service provider provides the service. Generally, the exclusive host service provider gives full management permissions and can directly install the server certificate. For a host shared by multiple people, you can also install the SSL Certificate by communicating with the service provider, purchasing an independent IP address, or purchasing an SSL license.

 

4. If the server has changed the IP address, can the original SSL certificate still be used?

 

Generally, the SSL certificate is bound to a domain name, so changing the IP address of the server will not affect the certificate. As long as the domain name remains the same, the original SSL certificate can also be used, and you can re-resolve it to the new IP address. However, if the SSL certificate you applied for is an IP address, the server changes the IP address and the original SSL certificate cannot be used. Therefore, you need to decide whether to apply for a certificate for your website domain name or IP address based on your business needs.

 

5. If the hardware and software (Web Server) have been changed, do I need to apply for an SSL Certificate again?

 

The SSL server certificate has nothing to do with hardware. If the system and web server version are the same, it will not be affected. However, if you change the server software, you have to apply for a new certificate. Because the SSL server certificate cannot be used on the platform.

 

6. How does one request multiple certificates on the same site on IIS, or update or replace certificates?

 

In Microsoft IIS 6.0, each website can send only one CSR request at a time. If you create a new CSR request on an existing request, the original request (and the private key) will be overwritten. Therefore, do notServer CertificateConfiguration.

 

If you want to request multiple certificates for the same site, or update or replace certificates, you can create a temporary site to request certificates on the temporary site. After the certificate is correctly installed on the temporary site, you can delete the temporary site, on the official site, use the "assign existing certificate" or "Replace current site Certificate" method to switch the certificate application.

Http://www.ert7.com/service/question/1300.html