How do I apply for an SSL certificate?

Hello! The application for the SSL certificate GWORG CA is divided into the following steps:

If you already have one, enter your account and password and click the [Login] button.

If you don't have an account, see how to sign up for GWORG.

2. Select the product, select the certificate brand you purchased, and then click the [Click to Apply] button to confirm the required product and certificate type.

3. Click Generate Certificate Now and fill in the CSR request.

Note: Due to the complexity of the application process, please apply according to the GWORG textbook.

It is a digital certificate that is installed on a server.

You have to go to a regular CA agency to apply.

The SSL certificate needs to be applied for at a regular CA institution, and the specific steps are as follows:

The first step is to generate and submit a CSR (Certificate Signing Request) document.

CSR files can generally be generated by ** (or generated on the server), and the system will generate two secret keys, public key CSR and key key, at the same time as the applicant makes it. Once you have selected the SSL certificate application, submit the order and submit the generated CSR file to the CA authority where the certificate is located.

In the second step, the CA agency conducts verification.

CAs can verify submitted SSL certificate applications in two ways:

The first is domain name authentication. A verification email will be automatically sent to the domain administrator's email address (this email address is the domain contact email address that was queried through the WHOIS information). After receiving the email, the administrator will confirm that it is correct and click "I confirm" to complete the email verification.

All SSL certificates must be authenticated.

The second is enterprise-related information certification. For enterprises that apply for an SSL certificate or an EV SSL certificate, in addition to domain name authentication, it is also necessary to manually verify the relevant materials and information of the enterprise to ensure the authenticity of the enterprise.

In the third step, the CA institution issues the certificate.

Due to the different models of SSL certificate applications, the materials and methods to be verified are somewhat different, so the issuance time is also different.

If you apply for a DV SSL certificate, it will be issued in about 10 minutes at the earliest. If you apply for an OV SSL certificate or an EV SSL certificate, it will be issued within 3-7 working days.

An SSL certificate is a type of digital certificate (digital certificates include: SSL certificate, client certificate, signing certificate, etc.), because the configuration is also called the server SSL certificate on the server. SSL certificates are issued by trusted digital certificates that comply with the SSL protocol (e.g., CA

WoSign CA) is a digital certificate issued after verifying the identity of the server.

1. Make CSR documents.

CSR is a Certificate Secure Request. This document is made by the applicant, and at the same time, the system will generate 2 keys, one is the public key is this CSR file, and the other is the private key, which is stored on the server. To make a CSR file, the applicant can refer to the documentation of the web server, generally Apache, etc., use the OpenSSL command line to generate key+csr2 files, tomcat, jboss, resin, etc. use keytool to generate jks and csr files, and iis creates a pending request and a csr file through the wizard.

2. CA certification.

There are generally 2 ways to submit CSR to our staff:

1. Domain name authentication, generally through the administrator's email authentication method, this way of authentication is fast, but there is no enterprise name in the issued certificate;

2. For enterprise document certification, the business license of the enterprise needs to be provided. It generally takes 3-5 working days.

3. The installation of the certificate of the hungry brother.

After receiving the CA certificate we sent to you, you can deploy the certificate to the server, and the general Apache file directly copies key+cer to the file, and then modifies the file; For example, you need to import the certificate CER file issued by the CA into the JKS file, copy it to the server, and then modify it. IIS needs to handle pending requests to import the CER file.

Hello! 1. Prepare the domain name, and the domain name can be resolved normally.

2. Make sure that you are using an independent server or cloud server, and the virtual host usually does not support installation.

4. Go through the certification procedures in accordance with the requirements of GWORG. The EV certificate needs to provide a business license, the contact of the person in charge**, and the name.

5. After getting the SSL certificate, you can install it on the server to realize HTTPS, if you can't install it, you can install GWORG.

CSR is a Certificate Secure Request. This file is made by the applicant, and at the same time, the system will generate 2 keys, one is the public key is this CSR file, and the other is the private key, which is stored on the server. To make a CSR file, the applicant can refer to the documentation of the web server, generally Apache, etc., use the OpenSSL command line to generate key+csr2 files, tomcat, jboss, resin, etc. use keytool to generate jks and csr files, and iis creates a pending request and a csr file through the wizard.

There are generally 2 ways to submit CSR to our staff:

1. Domain name authentication, generally through the administrator's email authentication method, this way of authentication is fast, but there is no enterprise name in the issued certificate;

2. For enterprise document certification, the business license of the enterprise needs to be provided. It generally takes 3-5 working days.

After receiving the CA certificate we sent to you, you can deploy the certificate to the server, and the general Apache file directly copies key+cer to the file, and then modifies the file; For example, you need to import the certificate CER file issued by the CA into the JKS file, copy it to the server, and then modify it. IIS needs to handle pending requests to import the CER file.