Domains Buy Design

You’ve finally done it. After hours of design and testing, your website is finally ready to be launched. But, in the back of your mind, you know you’ve been putting off that one last step: adding an SSL to your website. Since 2018, SSLs have become required features for Safari, Chrome and Firefox, so most web designers are very familiar with SSLs by now. If you’re new to the web design world, however, SSLs can feel daunting.

Don’t stress, we’ve got you covered.

In this guide, we’ll cover what an SSL is, how you can add an SSL to your website, and tips for getting the most out of your SSL.

Let’s go.

What is an SSL?

An SSL (Secure Sockets Layer) Certificate is the standard security technology for establishing an encrypted link between networked computers. The SSL itself is a digital document that ties the identity of a website to a cryptographic key pair, which includes a public key and a private key.

The public key allows a web browser to start an encrypted communication session with a web server via the TLS (Transport Layer Security) and HTTPS (Hyper Text Transfer Protocol Secure) protocols. The private key is kept secure on the server and is used to digitally sign web pages.

Put more simply, an SSL tells your customers that it’s safe to browse, shop and enter their secure information on your site.

And for websites without an SSL? Here’s the warning that visitors will see:

An SSL certificate will also impact your website’s SEO (search engine optimization). Sites without an SSL installed will be deemed as lower-trust websites and will be penalized on search rankings. Give your viewers confidence and keep your site secure with an SSL.

How to add an SSL to your website

Let’s take a look at the process for setting up and installing an SSL on various server types below.

Note: This is a technical process, so if assistance is needed, click here.

Request your CSR

The first step to setting up your SSL will be requesting a CSR (Certificate Signing Request) from your hosting provider.

Note: If you’re installing your SSL to the primary domain of a Domains Buy Design hosting account, your CSR is generated automatically. When generating a CSR, you’ll need to provide specific details.

These are the details you’ll need to be prepared to provide:

Common name

The fully-qualified domain name, or URL, you want to secure. Note: If you are requesting a Wildcard certificate, add an asterisk (*) to the left of the common name where you want the wildcard, for example *.coolexample.com.

Organization

The legally registered name for your business. If you are enrolling as an individual, enter the certificate requestor's name.

Note: While this is a required field for CSR generation, the organization field is only vetted with Organizational Validation (OV) and Extended Validation (EV) SSL types. Not sure which cert type you need?

City/Locality

Name of the city where your organization is registered/located. Do not abbreviate.

State/Province

Name of the state or province where your organization is located. Do not abbreviate.

Country

The two-letter International Organization for Standardization (ISO) format country code for where your organization is legally registered.

Generating your CSR

The process of requesting a CSR will vary by server type. Our Help Center has general guides for the most common server types, but if you do not see your particular server listed, you will need to refer to the documentation for your specific server for details on generating a CSR.

Set up your SSL

Once you have your CSR generated, it’s time to set up your SSL certificate.

Request your SSL

You’ll need to have your CSR handy for this portion of the setup:

Go to your Domains Buy Design product page.
Select Manage All next to SSL Certificates.
Select New Certificate for the SSL credit you want to use.
On the Certificate Setup page, select Input a CSR.
Paste your CSR into the box and select Continue to open the Prove Domain Control page.
Leave everything as it is and select Continue.
On the Additional Options page, select the Certificate Issuer you want to use. The only thing that changes is who the certificate is issued by. Your certificate will function the same regardless of what you choose.
Read the Subscriber Agreement, select the checkbox for I agree to the terms and conditions of the Subscriber Agreement, and then select Continue.

Verify your SSL request

Before we can issue your certificate, we're required to verify that you control the domain that you’re using for your SSL request. This is to ensure that the SSL request is being made by an approved entity.

How you prove your domain control depends on if your certificate and domain are in the same Domains Buy Design account. Here are in-depth guides for both options:

Download your SSL files

If you're manually installing your SSL certificate on your hosting account or server, you need to download your primary and intermediate certificates from the SSL dashboard. If the option to download your SSL certificate is disabled, we’ve already installed the certificate for you.

Go to your Domains Buy Design product page.
Select SSL Certificates and select Manage for the certificate you want to download.
Under Download Certificate, select a Server type and then select Download Zip File.

Install your SSL

Now that you have your SSL files, it’s time to install your SSL. This process will vary based on your server type. We have instructions for the most common server types in our Help Center to guide you through installing your SSL, but you will need to contact your hosting provider if your server configuration isn’t listed.

Redirect HTTP to HTTPS

With the SSL installed, the next step will be to redirect your site to HTTPS. For those using Managed WordPress, this update will be automatic. If you’re using a non-managed installation of WordPress or a different type of server, you can find the steps to redirect HTTP to HTTPs on our Help Center.

Once you've added the redirect, you can use our SSL Checker tool to make sure that everything is working as intended.

Potential SSL installation issues

After installing your SSL and redirecting to HTTPS, it’s time to test your website for some of the common issues after installation. Here are the top issues to check and resolve:

SSL certificate not found

If your SSL is installed incorrectly, your visitors may see a “certificate not found” error.

HTTPS redirect failure

A site not properly configured for SSL can lead to a redirect failure error message being shown to visitors trying to find your site

SSL certificate mismatch

Error message occurs if the site isn’t properly validated prior to completing your SSL certificate installation.

Mixed-content errors

If your website’s source code is pulling in other resources with insecure HTTP protocol (such as images, videos, stylesheets, or scripts) your site will not load correctly.

Or, save the time and hassle and have us do it for you

If the steps to add an SSL to your website feels overwhelming, or you just have better things to do with your time, try the Managed SSL Service from Domains Buy Design.

Domains Buy Design offers both a one-time installation service and fully managed SSL services, depending on your needs. Not sure which would best fit your purposes? Here’s a breakdown of each.

Domains Buy Design SSL Setup Service

This one-time service includes the following features:

Installation and configuration of the SSL to the server.
Provide necessary redirection to HTTPS.
Update all mixed content to ensure the SSL padlock shows in browser address bars.
Update the sitemap so that Google recognizes that the site is loading securely over HTTPS.
If the site has a firewall, update the WAF settings to ensure full encryption.

It’s important to note that Domains Buy Design SSL Setup Service requires that the website be hosted on a server with a control panel. If the hosting provider does not provide a control panel, then we will be unable to install the SSL. Additionally, this service can only be used for a single installation. If other servers require SSL installation, then additional services will need to be purchased.

Domains Buy Design SSL Managed Service Add-on

The SSL Managed Service Add-on includes all of the features of the Domains Buy Design SSL Setup Service, but also includes the following:

Domains Buy Design provides ongoing support for any changes that are made to the website to ensure that your website remains fully encrypted for the length of the product subscription (for example, fixing mixed content errors that can occur at any point when new content is added to a site).
Ensure the SSL certificate is reissued at the end of each validity period to ensure that there is no gap in protection.

If there are any issues that need to be addressed, SSL Managed Service customers can simply create a help ticket in their SSL dashboard and our professionals will work to quickly address the issue. SSLs can seem daunting, but they don’t need to be a roadblock for you or your business. Need help with your SSL installation? Give our Customer Care agents a call and let us handle the heavy lifting.

Choose the SSL that works for you!

To wrap this up, if you're a webmaster or anyone who cares about website security (which should be all of us), it's important to get your head around the various types of SSLs: EV SSLs, OV SSLs, DV SSLs, Multi-domain SSLs, and Wildcard SSLs. Each of these has a special role in keeping things secure online, from the basic task of confirming that you own the domain, all the way through to validating your company details in order to boost the credibility of your business.

SSL certificates help to keep our online activities secure, providing a trusty shield against prying eyes and keeping customer info safe and sound. Your choice of SSL can do more than just fend off the bad guys, it also increases how trustworthy and authentic your site is for your visitors. So, it's well worth taking the time to choose the right one!

Monday, October 16, 2023

Happy Halloween 2023 from Binx and the rest of us.

Sunday, October 15, 2023

How to add an SSL to your website.