SSL Certificates

From LAMP Host Knowledge Base
Jump to: navigation, search

The SSL and TLS protocols are the Internet standard for encrypting communications between users and Internet servers or eCommerce websites. Data sent via an SSL connection is protected by encryption, a mechanism that prevents eavesdropping and tampering with any transmitted data. SSL provides businesses and consumers with confidence, that private data sent to a website, such as credit card numbers, are kept confidential. Web server certificates (also known as secure server certificates or SSL certificates) are required to initialize an SSL session.

Customers know when they have an SSL session with a website, because their browser displays a little gold padlock and the address bar begins with 'https' rather than 'http'. SSL certificates can be used on web servers for Internet security and mail servers such as IMAP, POP3, and SMTP, for email delivery security.

Ordering an SSL Certificate

To order an SSL Certificate, simply visit our SSL product page at https://www.lamphost.com/SSL_Certificates and place an order for your domain name. LAMP Host's tech staff will generate a 2048-bit key file and a Certificate Signing Request (CSR) for your order and process it with the certificate authority.

Following the processing of your CSR, the certificate authority will send a verification email to the Administrative Contact for your domain (be sure your domain contact information is correct before placing your order!). When the verification email arrives in your inbox, follow the instructions in the message to verify ownership of your domain and provisioning of the SSL Certificate.

After verification, your newly provisioned certificate will sent directly to our tech staff. We will then install your certificate and follow up with you via email should any other steps become necessary.

Self-signed LAMP Host Certificates

Several services provided by LAMP Host allow SSL/TLS connections via our self-signed SSL certificates. A self-signed certificate provides all the encryption benefits of an SSL certificate, but no certificate chain is offered by a third party to verify the certificate's authenticity. When choosing to access email, the Site Manager, or the Server Manaager with an encrypted connection, your application will present you with a warning message that the certificate cannot be verified by a third party. It is safe to proceed with the certificate, and many applications offer an option to "Accept this certificate permanently."