Shulou(Shulou.com)06/01 Report--

With the increasing development of the Internet, it has gone deep into all aspects of people's life, it can be said that we can not do without the Internet. In the face of such human dependence, Internet security is becoming more and more important, and personal privacy needs to be protected more and more. How can we improve our security on the Internet? How to protect our privacy on the Internet? How to prevent being hijacked? Wait, there are many security factors to consider.

In the big factory Google chrome marking website security and Apple ATS policy, as well as the promotion of WeChat Mini Programs, HTTPS gradually entered everyone's line of sight, it makes people realize the necessity and urgency of Internet encryption. And with the recent release of the "Network Security Law", people pay more attention to the importance of Internet security, we must be able to ensure security on the Internet infrastructure, the use of HTTPS is imperative. As an important part of the HTTPS SSL certificate, also began to have a free nature, this article describes how to apply for a free certificate.

Bloggers have also found that more and more bloggers and webmasters are putting their websites on HTTPS, and it seems that the era of HTTPS has come.

Apply for a certificate

FreeSSL.org-A website that applies for free certificates:

The site specializes in applying for free certificates and it is said that more certificate brands will be added in the future. Now support certificate application, certificate expiration reminder, certificate management and other functions. Currently, you can apply for two certificates: Let's Encrypt and TrustAsia. The difference between the two is:

Let's Encrypt, which supports multiple domain names and is valid for 3 months.

TrustAsia, which supports a single domain name (www), valid for 1 year.

1. Fill in the domain name

Fill in the domain name for which you need to issue a certificate on the front page of the website, separate in English. If it is a single domain name, the domain name of www will be added automatically by default.

2. Enter the mailbox

FreeSSL provides a reminder of certificate expiration. Through this mailbox, FreeSSL will email you to remind you to change your certificate 30 or 7 days before it expires. It's great. I'm not afraid of the expiration of the certificate any more.

3. Select certificate / verification type

Both brands of the site can apply for RSA and ECC certificates and support DNS verification and File file verification. Choose your own most convenient way.

Here you need to explain the CSR generation. There are three ways:

Web Cryptography, the website uses Web Cryptography to generate private keys and CSR by default. This will not make it possible for the private key to spread through the network and protect the security of the certificate you apply for as much as possible.

Paste manually. If you attach great importance to security, you can apply by pasting your own generated CSR.

Server generation, not recommended, in your browser does not support Web Cryptography (hint) and can not paste their own CSR, the FreeSSL server will automatically generate your private key and CSR to apply. When the certificate is issued in the last step, the private key is returned together with the certificate.

4. Click generate

Everything is ready, click generate. If you are DNS authentication, you can get the following information:

You need to add the TXT record to the DNS service provider when you are finished. You can use manual verification to verify (if you click verify directly, you need to re-fill in the verification information after failure). When all domain names are verified, click verify, and you can get your certificate.

5. Obtain a certificate

When your verification information is passed, you will see the following:

The first box is the certificate (including the intermediate certificate), and the second box is the private key. You can easily copy it, or click to download and package it into a zip file. Since then, the application for the certificate has been completed.

Certificate management

FreeSSL.org supports simple background management, such as certificate download, certificate information view, certificate expiration reminder and other functions.

Need to be explained briefly, the certificate can only be downloaded to the certificate file, the private key can not be downloaded. If you lose your private key, you can check to see if there is a private key in your browser localstage (provided you haven't applied for a new certificate), and they store it here.

1. Register an account

To enter the background of managing certificates, you first need to apply for an account:

It will send an activation email to your mailbox, click the activation connection to activate and log in automatically.

2. Log in to the backend

Log in directly to the management backend, which is very concise:

3. Check the certificate information

4. Certificate upload

The certificate view does not have too much explanation, I think it should be the function of reminding the expiration of the certificate to facilitate users to manage their own certificates.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.