There are many places to buy a web certificates… Thawte and VeriSign are the most used CA’s (certificate authorities) on the internet. GeoTrust and GoDaddy offer cheaper certs but are considered less secure and require extra steps to install. By Default Safari does not recognize GoDaddy certs as a trusted CA. I’ve included the “Fix” in this link.
- Before you can buy a cert you need a thing called a “CSR”. A “CSR” (Certificate Signing Request) needs to be generated on the (web) server you are planning to secure. If you do not manage your own web server, contact your web host or Internet service provider to request a CSR.
- Select an SSL Certificate and click buy. You can buy SSL certs or SSL Certs with EV. EV turns the URL Field in the Browser “Green”. This is a quick way for people to verify that “Yes” I am on a secure site and yes I am logged in and encryption is on (https). EV certs normally take longer to buy because the CA does a background check on your company. Because of this, EV certs tend to be more expensive.
- Log into your CA’s website and Download the certificate.
- Most CA’s have instructions to on their website you can follow on how to install a SSL certificate. Please keep in mind each web server will have their own methods. The link I have included covers a very wide array of vendors.
One thing I really like about Thawte and VeriSign is that they have a SSL Assistant app that can make generating a CSR on Windows IIS or Red Hat Linux very easy! Anyone who has tried to install a cert in IIS will know what I mean when I say it’s not the easiest thing in the world