{"id":134886,"date":"2020-12-16T17:00:19","date_gmt":"2020-12-16T14:00:19","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/"},"modified":"2020-12-16T17:00:19","modified_gmt":"2020-12-16T14:00:19","slug":"how-do-ssl-certificates-secure-the-web-cloudsavvy-it","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/","title":{"rendered":"#How Do SSL Certificates Secure the Web? \u2013 CloudSavvy IT"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a41314a7f4a6\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a41314a7f4a6\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#What_is_SSLTLS\" >What is SSL\/TLS?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#What_is_the_Purpose_of_SSLTLS\" >What is the Purpose of SSL\/TLS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#How_Does_SSLTLS_Actually_Work\" >How Does SSL\/TLS Actually Work?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#What_Does_It_Look_Like_in_a_Browser\" >What Does It Look Like in a Browser?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#How_Are_SSL_Certificates_Implemented\" >How Are SSL Certificates Implemented?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#Generate_CSR_Public_and_Private_Key\" >Generate CSR (Public and Private Key)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#Submit_CSR_Public_Key_to_CA_for_Validation\" >Submit CSR Public Key to CA for Validation<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#Receive_and_Install_SSL_Certificate\" >Receive and Install SSL Certificate<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#Implement_Intermediate_Certificate\" >Implement Intermediate Certificate<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/buradabiliyorum.com\/en\/how-do-ssl-certificates-secure-the-web-cloudsavvy-it\/#Where_Can_I_Get_an_SSL_Certificate\" >Where Can I Get an SSL Certificate?<\/a><\/li><\/ul><\/nav><\/div>\n<p><strong>&#8220;#How Do SSL Certificates Secure the Web? \u2013 CloudSavvy IT&#8221;<\/strong><\/p>\n<div id=\"article-content-area\">\n<figure id=\"attachment_8606\" style=\"width: 700px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-8606 size-full\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/7d971d5ac547c56ada68c02e901cff62\/p\/uploads\/2020\/03\/93b8da07.png\" alt=\"\" width=\"700\" height=\"300\" data-crediturl=\"https:\/\/www.shutterstock.com\/image-photo\/web-browser-closeup-on-lcd-screen-1353121475\" data-credittext=\"Shutterstock\/Robert Avgustin\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><figcaption class=\"wp-caption-text\"><span class=\"imagecredit\"><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.shutterstock.com\/image-photo\/web-browser-closeup-on-lcd-screen-1353121475\">Shutterstock\/Robert Avgustin<\/a><\/span><\/figcaption><\/figure>\n<p>SSL certificates are issued to protect important traffic between websites and users, so that attackers can\u2019t intercept\u00a0sensitive data. Let\u2019s take a look at how SSL certificates work on the web!<\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"What_is_SSLTLS\"><\/span>What is SSL\/TLS?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSL, which stands for Secure Sockets Layer, is a protocol used to encrypt traffic between two computers. Interestingly enough, we still commonly refer to SSL but in reality TLS (Transport Layer Security) is now, and has been, the standard protocol for securing traffic between websites and users since SSL was deprecated in 1999.<\/p>\n<p>That being said, when we talk about SSL and SSL certificates, we are most likely talking about the same encryption <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" data-internallinksmanager029f6b8e52c=\"4\" title=\"Technology\" target=\"_blank\" rel=\"noopener\">technology<\/a>. If you are really interested in the nitty-gritty details of how TLS works, you can read the RFC of TLS 1.3 <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/tools.ietf.org\/html\/rfc8446\">here<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"What_is_the_Purpose_of_SSLTLS\"><\/span>What is the Purpose of SSL\/TLS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL\/TLS was invented and implemented to secure data between networked computers by encrypting and authenticating traffic on the network. Normally, when two computers are networked or a user is visiting a website, the traffic and contents is unencrypted and essentially available to be intercepted. By incorporating encryption, the data users enter in forms and information that is passed between two systems is secured from prying eyes.<\/p>\n<p>In the today\u2019s world, failing to setup encrypted communication to protect users and data is a recipe for disaster. With attackers lurking in every corner of the web, it is necessary to take extra precautions to secure your website and networks. Whether you are connected to a public WiFi at a coffee shop, entering sensitive financial information into an online form, or simply signing into your email, your data would be at risk without SSL and TLS encryption.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_Does_SSLTLS_Actually_Work\"><\/span>How Does SSL\/TLS Actually Work?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL and TLS work by creating key pairs, using a public and private key, to authenticate connections and define the identity of a website. The private key is held secure by the website and a public key is available for users.<\/p>\n<p>The way public and private keys work together allows browsers to automatically encrypt user traffic with a public key in a way that only can be decrypted by the private key. This means if a website is configured with TLS properly, all traffic between you and the server (including but not limited to forms and logins) is secured, encrypted, and only able to be decrypted and deciphered by the website. This protects you from an attacker on your network snooping on traffic and recovering sensitive data.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"What_Does_It_Look_Like_in_a_Browser\"><\/span>What Does It Look Like in a Browser?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-4146\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/f7f3f4d3df587f8e35c0fa25b80feebd\/p\/uploads\/2020\/03\/ab3ed03c.png\" alt=\"\" width=\"747\" height=\"807\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>In your browser, you will see a lock icon. If you click it, you should see more information about the connection and whether it is secure or unsecured. Many browsers highlight the lock button as well color it green or red. If you are not sure whether your connection is secured, you can click on this icon and see more information.<\/p>\n<p>Additionally, you can see <em>https<\/em> in the browser rather than <em>http<\/em>. Having this in the URL does not mean it\u2019s secured, but can be another indicator that it probably is. Most browsers will clearly warn you if a site is claiming to be a secured site but is not really.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-4147\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/b4c77a522ca1f154afc428dd7678d37e\/p\/uploads\/2020\/03\/189b8945.png\" alt=\"\" width=\"917\" height=\"407\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"How_Are_SSL_Certificates_Implemented\"><\/span>How Are SSL Certificates Implemented?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Now that you know what SSL and TLS is, and how it secures traffic, let\u2019s take a look at how we can implement our very own SSL certificate. The process is simple! Generate a Certificate Signing Request, submit the CSR and receive an SSL Certificate, install the SSL certificate, and install the inter<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a>te certificate.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Generate_CSR_Public_and_Private_Key\"><\/span>Generate CSR (Public and Private Key)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The first step to getting an SSL certificate is generating a <em>Certificate Signing Request<\/em>, or CSR, on your server. When you create a CSR, you will indicate the domain name of the website being secured, your organization and address and finally the key type and key size.<\/p>\n<p>This process creates a public and private key on your server and generates a CSR file which contains the public key. Note the files location as you may need to open this in a text editor and copy the contents.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Submit_CSR_Public_Key_to_CA_for_Validation\"><\/span>Submit CSR Public Key to CA for Validation<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Once you have created your CSR, you will submit it to a <em>Certificate Authority<\/em> (CA) to have it validated. Anyone can create SSL certificates, but modern browsers only trust certificates from Certificate Authorities.<\/p>\n<p>When you submit your CSR to the Certificate Authority, they will send you back an SSL certificate. This certificate is certified by the CA to connect to your website, preventing other users from forging their own certificate.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Receive_and_Install_SSL_Certificate\"><\/span>Receive and Install SSL Certificate<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>When you have received your SSL certificate from the CA, you can now install it on your server and connect it to your website. Many control panels make this an easy process but it will vary depending on your operating system and server setup. If you are working with cPanel or Plesk, you can install SSL certificates through the dashboard. If you are running your website with no control panel, you will have to do a bit of manual work to get it configured. Congratulations! You\u2019re\u00a0<em>almost<\/em> done.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Implement_Intermediate_Certificate\"><\/span>Implement Intermediate Certificate<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The intermediate certificate is signed by the Certificate Authority\u2019s root certificate, proving that they have validated the SSL certificate. The intermediate certificate essentially signs your SSL certificate and creates a ring of trust and authentication between your website, the CA, and users around the world. Once you implement the intermediate certificate, you bind the connection between your server, your website, and the Certificate Authority, keeping users safe and secure!<\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"Where_Can_I_Get_an_SSL_Certificate\"><\/span>Where Can I Get an SSL Certificate?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>With all of that being said, let\u2019s talk about how we can get our very own SSL certificate signed by a trusted CA.<\/p>\n<p>As far as generating a CSR file, you will need to figure out how to do that on your operating system and server setup. If you are using shared or managed hosting, it should be as easy as asking for help. If you are using Windows Server, you can check out this guide here. And Linux users, I\u2019m sure you can figure it out!<\/p>\n<p>To get your CSR signed, you can find popular Certificate Authorities include DigiCert, Comodo, Symantec, and RapidSSL. Many domain name registrars have services to help you get your signed by a trusted CA and hosting providers do the same!<\/p>\n<p>It is getting easier than ever to incorporate SSL and secure encryption practices into your website and it can benefit everyone! Waste no time and setup your first SSL certificate today!\n<\/p><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/technology\/\" target=\"_blank\" rel=\"noopener\">Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/www.cloudsavvyit.com\/4145\/how-do-ssl-certificates-secure-the-web\/\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;#How Do SSL Certificates Secure the Web? \u2013 CloudSavvy IT&#8221; Shutterstock\/Robert Avgustin SSL certificates are issued to protect important traffic between websites and users, so that attackers can\u2019t intercept\u00a0sensitive data. Let\u2019s take a look at how SSL certificates work on the web! What is SSL\/TLS? SSL, which stands for Secure Sockets Layer, is a protocol&#8230;<\/p>\n","protected":false},"author":1,"featured_media":134887,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.cloudsavvyit.com\/p\/uploads\/2020\/03\/93b8da07.png","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-134886","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/134886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=134886"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/134886\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/134887"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=134886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=134886"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=134886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}