digital certificate A digital certificate is a file digitally signed by a certificate authority that contains public key owner information and public key. The simplest certificate contains a public key, certificate name, and the digital signature of the certificate authority. Another important feature of digital certificates is that they are only valid for a specific period of time. SSL Certificate SSL (Secure Socket Layer) record is a communication encryption system between Internet standard users and websites. The data sent through the SSL connection is protected by an encryption mechanism that prevents eavesdropping and tampering with any transmitted data. Enterprises and consumers have confidence in SSL because they can keep confidential credit card numbers, personal data and other information. HTTPS HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer) is a website encryption transmission protocol based on SSL protocol. After the website is installed with an SSL certificate and accessed using HTTPS encryption protocol, the "SSL encryption channel" (SSL protocol) between the client browser and the website server can be activated, so as to achieve high strength two-way encrypted transmission and prevent the transmission data from being leaked or tampered with. In short, HTTPS=HTTP+SSL, which is the secure version of HTTP. CA Certification Center That is, Certificate Authority. CA is the authority responsible for issuing certificates, authenticating certificates, and managing issued certificates. After the user submits an application to the CA, the CA is responsible for reviewing the user information, then "signing" the key information with the private key, and publishing the corresponding public key. The client can use the public key to verify the signature. Root Certificate The root certificate is the certificate issued by the CA certification center to itself and the starting point of the trust chain. Installing the root certificate means trusting the CA certification center. CSR CSR (Certificate Signing Request) is the certificate request file, that is, when a certificate applicant applies for a digital certificate, the CSP (encryption service provider) generates a certificate request file while generating a private key. After the certificate applicant submits the CSR file to the certification authority, the certification authority uses its root certificate private key to sign and generate a certificate public key file, That is, the certificate issued to the user. DV Certificate The Domain Name Verification (DV) certificate only requires the applicant to verify that he/she is the owner of the domain name. The verification only needs to receive the WHOIS information or email address of the domain in which the verification applicant has the right to use the domain and send an email. Domain name verification can be issued quickly, but because almost everyone can get a DV certificate, the trust level is low, and it is suitable for small websites. Our company currently provides the following DV certificates: Symantec Basic DV、GeoTrust QuickSSL Premium、RapidSSL、RapidSSL Wildcard、Thawte SSL123 OV Certificate The Organizational Verification (OV) certificate needs to verify the applicant's organizational information to ensure that it is an actual organization. They verify the organization name, address, and phone number. These data must be consistent with WHOIS information, public government information websites or approved third-party websites. OV certificates increase consumer confidence because they can be sure that they are doing business with a real business entity. Our company currently provides the following OV certificates: GeoTrust True BusinessID、Symantec Secure Site、Symantec Secure Site Pro、Thawte SSL WebServer、GeoTrust True BusinessID Wildcard、Symantec Secure Site Wildcard、Thawte SSL Web Server Wildcard EV Certificate Extended Verification (EV) certificates are also known as "green gate" certificates. It is called the most trusted SSL certificate type. In the EV verification process, the issuing supplier or CA completely verified that the applicant is a legitimate business and has good reputation. Once this process is successfully completed and the applicant's EV SSL is issued, all browser indicators will be activated on the applicant's website. The most important indicator is the "green grid" of the user's web browser, which means more trustworthy. This certificate needs to be submitted with the business license and other valid qualifications of the enterprise for the strictest verification. It belongs to the highest level SSL certificate. The browser address bar is marked in green and displays the enterprise name that has passed the certification. It is suitable for Internet companies, large websites, government, finance, insurance and other industries. Our company currently provides the following EV certificates: Symantec Secure Site with EV、Symantec Secure Site Pro with EV、Thawte SSL WebServer with EV Domain name+organization verification Domain name+organization authentication certificate is considered the most secure and trusted SSL certificate type. This certificate not only verifies the domain name owner, but also needs to verify the organization information of the applicant. With the verification of domain name, organization and EV protection, it will ensure that the risk of domain name+organization verification certificate on the website is the lowest. Our company currently provides the following DV+OV certificates: GeoTrust Trust BusinessID with Extended ValidationQ: SSL free additional SAN |
