Shulou(Shulou.com)06/01 Report--

Editor to share with you what you need to prepare for the SSL certificate audit. I hope you will gain a lot after reading this article. Let's discuss it together.

Many platform websites have long been aware of the necessity of secure data encryption, and major computer browsers competed to require platform websites to deploy SSL certificates to upgrade Http ciphertext access to Https data encrypted browsing. Many enterprise official website responsible person or webmaster want to apply for SSL certificate, but the SSL certificate review steps are not clear. The steps for SSL certificate audit vary greatly depending on the level of the certificate, and the key is the difference between the DVSSL,OVSSL,EVSSL.

What are the steps of SSL certificate audit

First of all: materials that must be prepared in advance

No matter what kind of SSL certificate you are applying for, you must prepare the following materials in advance:

Website domain name or CSR

Mobile contact name, email address, phone number (this need not be expressed, the key is to contact the connection information content and mid-and late-stage renewal)

If the certificate you apply for is OV Enterprise Certificate or EV enhanced SSL Certificate, these two certificates must examine and approve the true identity materials of the company, and you must also show the following raw materials:

1. Enterprise name:

Unit

Corporate phone

The registered company must also produce the tax registration certificate of financial institutions for less than 2 years (only the EV certificate must be produced)

Mobile contact position

two。 Examination and approval of the right to use the domain name of a website

It is the basic authentication that must be carried out by DVSSL,OVSSL,EVSSL. The website domain name that you apply for the certificate is all of you or the website domain name of your management method, so as to avoid the website domain name being impersonated to apply for the certificate.

There are several ways to verify the right to manage the domain name of a website:

The first category: mailbox verification: the following types of e-mail can be considered to be those with administrator rights for the domain name of this website, if all of the following 1 e-mail can accept e-mail, so it can be approved according to the right to manage the domain name of the website.

Whois email address (whois email address is the website domain name mobile contact email address filled out at the time of domain name registration. Because of the recent harm of the European Community GDPR (usual data protection regulations), some domain name service providers have long hidden the contact number of the registered domain name person within the email address, so they often encounter the situation that the whois email address cannot be found. )

Admin@abc.com

Administrator@abc.com

Hostmaster@abc.com

Postmaster@abc.com

Webmaster@abc.com

The second category: make temporary analysis records for the domain name of the website.

Suitable for TXT analysis, CNAME analysis. This kind of method is faster, login domain name management background management, a few seconds can be carried out.

The third category: send authentication text to the root directory of the website that matches the domain name of the website. For example, your website domain name is www.abc.com, then if you have administrative rights to send a txt authentication text to the root of the website of the platform!

Note: for the name DVSSL certificate, you must only approve the certificate within half an hour after the verification of the right to use the domain name of the website. That is to say, DVSSL only has to cooperate with each other here. If you don't know how to deploy, you can ask the technical staff of Jinwang Technology to help deploy to the network server.

3. Approval of company ID card information

For OV and EV, you must also approve whether the company's real identity exists.

OV certificate generally must be within 2-4 working days, EV certificate must be within 2-5 working days, please wait carefully, people will follow the approval steps, if you need to fill raw materials or other matters, people will contact the applicant in a short time and solve the problem, the whole process requires a criminal defense lawyer to believe that people will show it for the customer.

4. Phone verification

For the OV EV SSL certificate, CA will dial the company phone number of the applicant for verification after examining and approving the company data. The key content of the phone is the order confirmation material and its enterprise information. It must be noted that the number dialed by CA is not the contact number shown by the applicant. CA will find a reliable third-party platform database query or service platform to obtain the contact information of the application processing company, and dial the previous mobile phone contact for phone verification. If you can't find a matching phone on the third-party platform, or the customer you are looking for cannot get through here. Then people will show the customer a reminder to deal with it, and the customer does not have to worry.

Complete the above SSL certificate audit, you will be able to obtain the certificate.

After reading this article, I believe you have a certain understanding of what you need to prepare for SSL certificate audit. You want to know more about it. Welcome to follow the industry information channel. Thank you for your reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.