If you want to create a secure certificate for your own site, here are the steps you need to follow:
1) Begin in the Control Panel of yourdomain.com.
2) Click on the Secure Server button.
3) Then click on Generate Request.
4) Fill-out the form with the correct information.
5) Click on Generate Request at the bottom of the screen.
This will generate a Certificate Signing Request [CSR] and an RSA Key. The CSR looks like this:
-----BEGIN CERTIFICATE REQUEST-----
MIIBRzCB8gIBADCBjDELMAkGA1UEBhMCVVMxDjAMBg
VQQHEwpTdWdhciBMYW5kMSYwJAYDVQQKEx1JbnRlcm
IEwuTC5DLjEeMBwGA1UECxMVV2ViIHByb2R1Y3RzIG
EwcwODAubmV0MFwwDQYJKoZIhvcNAQEBBQADSwAwSA
xJB16UE+XPsooNQgZV3QwL+eBDuf5fQUClqWWZrpRs
4rcCAwEAAaAAMA0GCSqGSIb3DQEBBAUAA0EAnAGcRQ
0qXsWLN7SyPTXcpBLKRdCHXjECNPfRBfPpVhd6S4N1
JBAN4sJTLUlOaBNbCX2UwihkQZJSe7NebbW12mRQ==
-----END CERTIFICATE REQUEST-----
6) Make and save a back-up copy of the CSR and Key (and key decryption password)
7) Then send the CSR to Verisign, Equifax or Thawte.
After asking for a lot of business verification information, Verisign, Equifax or Thawte, will send back a certificate.
The certificate looks like this:
-----BEGIN CERTIFICATE-----
MIICjTCCAfYCAQAwDQYJKoZIhvcNAQEEBQAwgY4xCzA
VQQIEw5XZXN0IFlvcmtzaGlyZTEOMAwGA1UEBxMFTGV
bmRvbSBDb21wYW55IEx0ZDEeMBwGA1UECxMVV2ViIHB
MRkwFwYDVQQDExB3d3cucmFuZG9tLmNvLnVrMB4XDTk
MDMxMjAxMzYxMVowgY4xCzAJBgNVBAYTAlVLMRcwFQY
aGlyZTEOMAwGA1UEBxMFTGVlZHMxGzAZBgNVBAoTElJ
ZDEeMBwGA1UECxMVV2ViIHByb2R1Y3RzIGRpdmlzaW9
cmFuZG9tLmNvLnVrMIGfMA0GCSqGSIb3DQEBAQUAA4G
N9lx3ynjE4K914a8JblYKSzdfQrHqDPUxTIODfgX0Pf
9Ns+yDE9X0CUVATeMjR4s42/3ypBJQc3685BsAgzAFf
yJg6yFjwtClvJGkXL0MbvoEBy/BRupa+1wIDAQABMA0
ACXMuDUuovLzAVwNDAZqfcQyZwGlKiJz7OceI4jDlm8
UuS7/Zzgc7ETBZ/5XRakilw60N1mnjqcXKuz0gMKd5U
+3bxTVxCcPpm3w/7tg8oR7rHP/o6dSb0sR/DKO58xEF
-----END CERTIFICATE-----
9) Using Control Panel -- install the certificate and previously saved key - be sure to put a return ("enter") between the two files.
The private key looks like this:
-----BEGIN RSA PRIVATE KEY-----
MIICWwIBAAKBgQDQML/6LOpgN9lx3ynjE4K914a8JblY
0PfdJDVWbj1/J/C5yrLs2tsN9Ns+yDE9X0CUVATeMjR4
AFfcinXAo973YtgIHEzgr3n+yJg6yFjwtClvJGkXL0Mb
AoGAcM0JJ47wiqOYEIe+1Uc7/oppeUXjT643neZjUdyE
qX3Fg5UdLxJBwCUcKb8kVsFmZj17qlUGP9Srd/Y3qqBH
gkjVwR8GXkVssZhqMTkvyDRB+BhLuawWXghRSOt34y5G
J+Ak+iIePR4VN+F1+5WevluAk3+WZJGdlk4ve0BEv+1E
jQbtWSedAkEA4CBvXBC+oEciah5UvprPBaMRSdevwUdj
diQtc/DyBAZCGw19BnwFTQiUfPOdAKnoAwJADoVivMqW
cD32uwTgzY80QVjO05K0H44lNI2LzZkiPu97PHnSimkO
CDC90MmvdtcZ5aoG8U+Oxk3u/VjW8CZyuI3yIhcvW+4+
3tBMufO3qAfSXpx+QwJAZcH7ngIDMgLdRtGhShJfG9H0
fPOdU+vaS5FpX0yUocy8AP7uLO/burPh2VEF3Ovhjg==
-----END RSA PRIVATE KEY-----
For accounts with their own certificates:
Call the file from within your html pages, scripts or browser using:
https://yourdomain.com/file.html
To call file in personal cgi-bin:
https://yourdomain.com/cgi-bin/file.html
Where to get a Secure
Certificate:
Here are some links:
www.thawte.com
www.verisign.com
www.equifaxsecure.com
Note: We do not currently support certificates from other companies
There is a server-wide certificate available for your use as well.
The address for this is:
https://host#.webserver1010.com/yourdomain/file
For example, https://host9.webserver1010.com/mydomain/securepage.html (be sure to leave the .com (etc.) extension off in this call)
NOTE: if you want to call a script using the server-wide secure certificate path you must first request access - we
must configure the server to allow that access.
|