SSL Certificates

General questions about SSL Certificates

What is SSL?

SSL is a standard protocol to secure online transactions. Data transfer over a SSL connection is encrypted and only readable for the sender and receiver. SSL stands for Secure Sockets Layer. For more information, check 'What is SSL?'


How long is a SSL Certificate valid?

A SSL Certificate is issued for a certain period and valid till the expiration date. Most certificates can be bought for 1 - 6 years. You can not extend the certificate during your contract period. In that case you'll have to purchase a new certificate.


Do I have to buy a SSL Certificate or can I issue a certificate myself?

It is possible to create 'self-signed' certificates. These certificates however are not trusted by a browser and users will get a warning and recommendation not to proceed any further. So it is better to buy an officially signed SSL certificate.


Do I need a SSL Certificate for every domain?

Generally spoken yes, every domain needs its own certificate. However there are certificates which are issued for several domains (SAN certificates) or multiple subdomains (Wildcard certificates).


Is it possible to install a SSL Certificate on several servers?

Generally spoken no, a certificate can only be used on one server. However there are certificates which can be used on several servers, or you can buy more licenses to use it on more than one server, for example SSL SAN Certificates. If you want to secure multiple host names for the same domain and server, you can use a Wildcard SSL Certificate (example: webmail.yourdomain.com, intranet.yourdomain.com and www.yourdomain.com).


How do I order and install a SSL Certificate?

To order a certificate you need to generate a Certificate Signing Request (CSR) first. Generate this CSR on the server for which you need the certificate. Manuals for generating a CSR and installation manuals are available.

On our site, select the certificate you want to buy, copy and paste your CSR in the order form and follow the instructions.


Do I need an unique IP-address to install a SSL Certificate?

Yes you do, to secure your site you will need a unique IP-number. Ask your provider to give you an unique IP-number for securing your site.


Is my application always safe by using a SSL Certificate?

With an SSL secured connection your application will be more secure. You are not protected against bugs such as SQL injections and cross site scripting.


I have secured my site with a password. Do I still need a SSL Certificate?

Yes you do. The password only allows access to certain areas of your site to those who have the password. The password does not secure transactions and data transfer is not encrypted.


Is it possible to secure only one directory with a SSL Certificate?

Which pages or directories you want to secure is entirely up to you. Depending on your server configuration you have to redirect relevant pages or directories to your secure https connection. Usually, a secure connection will show the same information as in an unsecured connection. The opinion of Networking4all is to redirect pages you want to retrieve secured to a secure connection.


How do I get a Certificate Signing Request?

A Certificate Signing Request is generated on the server for which you want the SSL Certificate. The way a CSR is generated depends on the software used by your web server. We have several manuals in our Helpdesk area.


Can I change my business details even after issuance?

After the SSL Certificate was issued it is no longer possible to modify your company details (eg company name) in the certificate itself. However you should modify your data in our administration.


What is malware?

Some SSL Certificates offer also the possibility to scan for malware. But what is it exactly? Malware is simply a generic term for malicious software. Malware has many different varieties, of which the virus is the best known. The effects of this malicious software can be significant. Thus, the Internet connection or computer can be slower and malware can attract other malware, but it can also eavesdrop and spread your data (passwords, logins and banking information).