World trusted certificates from our Hamster hands

What is the SSL Certificate?

SSL certificate is a digital signature that allows you to secure an encrypted connection between the web server (site) and the web client (browser) through the HTTPS protocol. HTTPS uses cryptographic protocol SSL to encrypt the transmitted data. An SSL certificate is especially needed for resources that work with personal data of users, payment systems and confidential information. Encryption of such data will ensure their protection from interruption of third parties.

Why Do You Need an SSL Certificate?

1. With a trusted SSL certificate you will get the confidence of your website visitors and future buyers. This is particularly important to e-shops etc., that is, platforms where visitor enter their private data.

2. You will get the little green lock on the website address bar. This way website visitors can immediately see that the site is trustworthy.

3. Safely accept credit cards on your website. Be sure that the sensitive data of your customers will be secured and encrypted. Even in case of data leaking, all information will be encrypted.

4. You will get a better Google ranking. From July of 2018 Google has announced that untrusted and unverified websites will go down from the top of search results lists.

How Does SSL Certificate Work?

Keys provide various encryption/decryption methods. The SSL certificate involves three keys: public, private and session.

The public key encrypts the message. The browser uses it when you need to send user data to the server, for example, after you entered the bank card details and clicked "Pay". This key is visible to everyone, the browser attaches it to the message.

The private key decrypts the message. It is used by the server when it receives a request from the browser. This key is stored on the server and is never transmitted along with the message.

The session key simultaneously encrypts and decrypts messages. The browser generates it for the time that the user spends on the site. If the user closes the tab, the session ends, and the key stops working.

Public and private keys are generated once, at the certificate issuance step. Therefore, the private key must be stored in the safe place, because if the key is lost or somebody else learns it, they will be able to decrypt the messages, and you will have to re-install the certificate.

Encryption with one key is called symmetric encryption, and it is not completely safe. Therefore, browsers make a unique key for each session, instead of storing it on the server.

In short

1. When the browser displays a website with an SSL certificate, the process known as the SSL handshake, begins.

2. At first a browser checks the validity of the SSL certificate, making sure it is validated and authenticated by a legitimate party and therefore can be trusted.

3. This is when the handshake process is starts, and in this process, two keys are participating by encrypting/decrypting data sent between browser and website (server).

4. After confirmation of the SSL certificate, the third key is generated (known as the session key) and it is used during the all browsing session. The session key creates a secure connection for the website browsing time. .

5. This process (the handshake) is established in a few hundred milliseconds. Once it is created, a website visitor can safely navigate during all the session.

How Do Certificates Differ?

SSL certificate can protect a large number of domains of subdomains.

Single domain. This certificate can protect only one domain or subdomain (hamster.tips or www.hamster.tips)

SAN. With this certificate you can protect up to 3 domains or subdomains. Every subdomain counts as a single domain.

Wildcard. This type of certificate can protect all levels of subdomains of a single domain (hamster.tips and *.hamster.tips).

Also, There Are Such Types of SSL Certificates:

Domain Validated - this is the most basic level of SSL validation. The certification authority verifies merely that you own a particular domain, which is confirmed through the information provided in the WHOIS. Of course, such a certificate allows you to provide reliable encryption of data on your site, but it does not verify the fact that you are the owner of a legitimate business.

Organization validated - these SSL certificates are intended for companies and organizations. Such certificates are required for sites where users enter essential information (credit card numbers, contact details, etc.). This certificate contains the name of the company. The Certification Authority verifies not only the fact that you own the domain but also the fact that you are the owner of a real company. The company must be present on the website of the state registration authority and in a trusted online directory. Scammers will not be able to obtain such a certificate, because they will not be able to pass the validation.

Extended Validation - one of the standards of the financial world. Certificates of this category have the highest level of reliability and are recommended to banks, payment systems, online projects with a large number of transactions and increased requirements for security operations. The main distinguishing feature of a certificate of extended validation is an indication next to the lock sign with the company name and special highlighting - they are often called SSL certificates with a green string.

How to Implement an SSL Certificate on a Site?

If you are using one of our Shared or Reseller hosting packages, we will install the SSL Certificate for you. If you wish to do it by yourself, we have prepared a useful step by step tutorial on how to implement SSL certificate on your website, check it out: https://www.hostens.com/knowledgebase/installing-ssl-certificate-to-shared-hosting-cpanel/

Can I Buy Only an SSL Certificate from You?

Yes. You can buy only a SSL Certificate. After a successful issuance, you will be able to download Certificate through our Client area.

Is SSL Issuance Process Automated?

Yes, we use an automated issuance process. You will have to submit your Certificate Signing Request (CSR), and the validation process will begin.