<p class="shortdesc"></p> <p class="p"></p> <section class="section" id="faq__section_hht_ncp_jnb"><h2 class="doc-tairway">How to choose an SSL certificate? What are the differences among different types?</h2> <div class="p">An SSL certificate is a digital certificate that enables websites to move from HTTP to HTTPS. There are three types of SSL certificates available: Domain Validation (DV SSL), Organization Validation (OV SSL), and Extended Validation (EV SSL). The differences are as follows:<table class="table frame-all" id="faq__table_hjb_pcp_jnb"><caption></caption><colgroup><col style="width:25%"><col style="width:25%"><col style="width:25%"><col style="width:25%"></colgroup><thead class="thead"> <tr class="row"> <th class="entry" id="faq__table_hjb_pcp_jnb__entry__1">Digital certificate</th> <th class="entry" id="faq__table_hjb_pcp_jnb__entry__2">DV SSL</th> <th class="entry" id="faq__table_hjb_pcp_jnb__entry__3">OV SSL</th> <th class="entry" id="faq__table_hjb_pcp_jnb__entry__4">EV SSL</th> </tr> </thead><tbody class="tbody"> <tr class="row"> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__1 "> <p class="p">Application scope</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__2 "> <p class="p">Individual</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__3 "> <p class="p">Organization, company</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__4 "> <p class="p">Enterprise, financial institution</p> </td> </tr> <tr class="row"> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__1 "> <p class="p">Level of trust</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__2 "> <p class="p">General</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__3 "> <p class="p">High</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__4 "> <p class="p">Strong</p> </td> </tr> <tr class="row"> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__1 "> <p class="p">Authentication strength</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__2 "> <p class="p">Website reliability</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__3 "> <p class="p">Organization and company reliability </p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__4 "> <p class="p">Strict authentication</p> </td> </tr> <tr class="row"> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__1 "> <p class="p">Security</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__2 "> <p class="p">General</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__3 "> <p class="p">Intermediate</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__4 "> <p class="p">High</p> </td> </tr> <tr class="row"> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__1 "> <p class="p">Credibility</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__2 "> <p class="p">General</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__3 "> <p class="p">Intermediate</p> </td> <td class="entry" headers="faq__table_hjb_pcp_jnb__entry__4 "> <p class="p">High</p> </td> </tr> </tbody></table></div> </section> <section class="section" id="faq__section_shc_cdp_jnb"><h2 class="doc-tairway">How to deploy an SSL digital certificate on servers?</h2> <div class="p"> <ol class="ol" id="faq__ol_okl_2dp_jnb"> <li class="li">Log in to the CA Certificates Service Console.</li> <li class="li">Download the server certificate.</li> <li class="li">Follow the instructions to deploy and install the SSL Certificate.</li> </ol> </div> </section> <section class="section" id="faq__section_fms_jdp_jnb"><h2 class="doc-tairway">What if an SSL certificate expires?</h2> <p class="p">An SSL digital certificate is no longer available after the expiration. You need to renew your certificate before it expires. Once the renewal is completed, the certificate service system will copy the information of the current certificate order into the renewal order, and will automatically submit the renewal certificate order for review.</p> <p class="p">When the review is approved, you will obtain a new digital certificate. You need to install a new digital certificate on your server to replace the certificate that is about to expire.</p> </section> <section class="section" id="faq__section_cnl_ldp_jnb"><h2 class="doc-tairway">How does the browser check whether an SSL certificate is operating normally?</h2> <p class="p">An SSL digital certificate is issued by the "trusted root certification authority" in the browser after the authentication of the server. The certificate has the dual functions of website authentication and encrypted transmission.</p> <p class="p">You can access your website using https:// if the website has successfully deployed the SSL certificate.</p> <p class="p"><strong class="ph b">Procedures</strong></p> <p class="p">In the address bar of the browser, enter https:// and the domain name to which your digital certificate is bound (such as https://pinganyun.com).</p> <p class="p">Press Enter to access your website through HTTPS.</p> <p class="p">You can successfully deploy the SSL digital certificate if you can access the website page normally and can see the security lock in the browser address bar.</p> <img class="image" id="faq__image_r2g_qdp_jnb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20210104174026-14b0e2aa98a0.jpg"> </section> <section class="section" id="faq__section_yhn_qdp_jnb"><h2 class="doc-tairway">What formats do mainstream digital certificates have?</h2> <p class="p">Generally, mainstream Web services are based on OpenSSL and Java basic cryptography libraries.</p> <p class="p">Tomcat, Weblogic, JBoss, and other Web Services usually use the cryptography library provided by Java. Generate a certificate file in Java Keystore (JKS) format through the Keytool in the Java Development Kit (JDK).</p> <p class="p">Web services such as Apache and Nginx generally use the cryptography library provided by the OpenSSL tool to generate certificate files in PEM, KEY, CRT, and other formats.</p> <p class="p">IBM’s Web services, such as Websphere, IBM Http Server (IHS). Certificate files in KDB format can be generated using the iKeyman tool of IBM products.</p> <p class="p">The Internet Information Services (IIS) in Microsoft Windows Server uses the certificate library provided by Windows to generate PFX format certificate files.</p> </section>