3. Are free SSL certificates available for use?

[Mimaktsm10]

Among the general mass of mostly paid tools of this kind, there are still free options. Namely, the so-called certificates with domain validation (for example, Start SSL). They will not open the possibility of transactions with money, but through the protocol of the site with a free SSL certificate, you can build a secure connection on the Internet between devices. Such options are good for owners of small offline businesses, owners of small reference sites.

4. How to install SSL certificate?

You need to start by creating a CSR request (this can be done on the web server side), in which you should specify all the information about the owner of the Internet resource and the public key. Companies selling SSL do not object if this is done during the process of ordering a certificate.

To be able to generate a CSR key, you must provide:

If we are talking about a Wildcard poland email list certificate , then specify the server name in the format “site.com” or “*.site.com” (here we mean that any number of any characters can be present in place of the asterisk).

The generally accepted designation of the country code , namely RU, KZ, UA, etc.

The region where the company is located (Saratov Region, for example).

Name of the city.

Full company name or full name of the domain owner.

Download a useful document on the topic:

Checklist: How to Achieve Your Goals in Negotiations with Clients
After receiving your request, the verification center sends you an SSL certificate for the HTTPS site protocol and a file with a personal secret key. Do not lose it and do not show it to anyone.

All that remains is to install the certificate for the HTTPS site protocol. As an example, see the procedure for Apache and nginx.

Apache

First, upload both the primary and intermediate certificates to the server (namely, to the /usr/local/ssl/crt directory, which is declared by default, but you may have a different one). The specified directory is the storage location for all certificates.

Then you need to download the main certificate, open it in text format, copy all the contents, including the words “Begin” and “End”.

The next step is to create a file vashsite.crtd in the /ssl/crt/ directory and paste into it everything you previously copied from the certificate.

Next, move the file with your personal key to the /usr/local/ssl/private/ directory.

Now all that remains is to add the following lines to the VirtualHost file:

SSLEngine on

SSLCertificateKeyFile /usr/local/ssl/private/private.key

SSLCertificateFile /usr/local/ssl/crt/yoursite.crt

SSLCertificateChainFile /usr/local/ssl/crt/intermediate.crt