Wednesday, 8 May 2013

How To Verify SSL Certificate Installation

Once a new SSL certificate in installed on your server it's very important to check if the process has been successful.

Main reasons bringing to a bad or not completely satisfying result are the following ones:

  • intermediate CA root SSL certificate not installed;
  • Private Key included in the installation process has not been issued for the right domain name or it is not in the right format required by the installation procedure for the server;
  • errors during the installation process.
In order to get a prompt feedback about the SSL certificate installed on a server it's possible to check its availability online, typing the domain name in the provided fields

The main three online services to do that check are:


The image added below lists result get typing, in the "Enter your Web Server's domain name" field, www.trustico.com.


In that case the status is "Successful"; that means the SSL certificate has been correctly installed and is currently running on it. In other occasions you may find different feedbacks, showing the SSL certificate is not properly operating on the domain name (for example "SSL is not configured on this port") or the Intermediate SSL certificate has not been installed.






Thursday, 2 May 2013

UCC/SANs SSL Certificates, GeoTrust Checks Added SANs

Our UCC/SANs SSL certificates are among the Trustico's best sellers, choosed to protect web servers and websites.

As mentioned in some previous posts, GeoTrust True BusinessID UCC/SANs and True BusinessID + EV UCC/SANs help you to secure, with a single digital certificate you would be able to install on several servers, up to 26 domains, subdomains and web servers (server names and .local ones) registered by the same Company.

For example you will be able to get an UCC/SANs SSL certificate for:

- www.trustico.com
- www.trustico.fr
- www.trustico.it
- www.trustico.co.uk
etc.



GeoTrust has recently changed the validation procedures for both the SSL certificates, starting to verify SANs (Subject Alternative Name) ownership, those will be included in the DNS fields.

In order to avoid SSL certificates issues delays Trustico suggests to check domains' and SANs' ownerships before adding these to the certification request and in the additional fields, to be filled during the ordering process. In case informations listed on the WHOIS page are different it's important to contact the registrar and ask for an update.


Wednesday, 3 April 2013

How NOT To Be Secure Online

Online security is important not only for big companies; in the last days Symantec showed how almost the 20% of small and medium companies could suffer for hacker attacks.

Company prevention is very important, but a lot can be made by users too!

Choosing a strong password, changing it periodically, avoiding spam via e-mail and being careful about how interacting with social medias are just some of the main tips gave by Symantec security experts.

Check these advises out and stay far away by hackers attacks!


Monday, 14 January 2013

How To Get A RapidSSL SSL Certificate Free For A Year

Among all the SSL certification solutions offered on the Trustico website (free trials for 30 days, "production" SSL certificates) you can now enjoy a great opportunity to secure your domain name: obtain a RapidSSL certificate for free for 12 months transferring the certificate you bought from another provider to Trustico.


Details

This chance is available for all the customers who took an SSL certificate from one of the following online competitors:

  • GlobalSign
  • Comodo
  • GoDaddy
  • Positive SSL
It's very simple to join that opportunity: order a "Competitive Upgrade" RapidSSL certificate and get it in few minutes, free for 1 year!

Our internal system, linked to the GeoTrust CA one, will check if the domain listed in the ordering process has been used by another provider to create a SSL certificate. In that case your request will be accepted with no costs involved for you.

The product you will receive (RapidSSL) will be a single domain SSL certificate, issued within a simple approver e-mail process. The two most important product feature are the extremely high recognition, guaranteed by 99,9% web browsers, and a 256 bit encryption. These stuffs confirm that RapidSSL is the right product for many of the web domains those need to be secured by SSL.


"Should I Wait For My Current SSL Certificate To Expire Before Moving To Trustico?"

No. You can transfer your SSL certificate to Trustico.it even if the original one is still active and running. Any remaining period will be added to the certificate that RapidSSL and Trustico.it will give to you.

Hurry up! Switch to Trustico and try our high quality online service!


Trustico is one of the most important SSL digital certificates, trust seals and anti-malware supports resellers, worldwide recognized for its service and amazing prices. Symantec Premium Partner, Trustico offers online security solutions issued by RapidSSL, GeoTrust, Thawte, VeriSign, Norton and Symantec. Contact us if you need more technical and commercial informations about Trustico.

Thursday, 27 December 2012

The Online Map Of Hacker Attacks

The Honeynet Project virtual map satisfies the curiosity of security experts about the cyber attacks happening worldwide, being updated in real time.


Accessing to the American no-profit security company would be possibile to see a map of the attacks, explaining in a simple but detailed way where hackers are operating.



Cyber attack map updated on December 18th, 2012, 11.10AM (Source map.honeycloud.net)

Let's find out which informations are included in that report:


  • red dots show attack against computers happing in that particular area;
  • yellow dots report honeypots, systems attracting hackers attention pretending to have, in its own databases, datas to be stolen;
  • black box, at the bottom of the page, updated in real time at each attack reported by supporters, detail the starting and arrival point for each single attack.
As the map updates are based on supporters contributions (users who decide to share them experiences with the community), it's clear the report bias, due to the areas where most of the contributors are based.

Nevertheless these datas are the manifesto showing how the cyber attacks never stop and are able to strike systems everywhere located, independently by the Company's dimensions and genres.

Do you know other services offering that type of datas?


Tuesday, 18 December 2012

What You Need To Know Before Ordering A SSL Certificate

There are some checks you would need to do before you would place an order for a SSL certificate; these are about the domain name and/or the Company who owns it. It's crucial to understand that the ones we'll talk about in that blog post are valid just for some of the digital certificates we offer (it usually depends on the informations that the certificate will eventually provide on web browsers).

Let's start with something required for all the SSL certificates: a dedicated IP and server, owned by the Company and/or the website administrator. This is something unusually included in the online hosting solutions, due to the high costs involved for the hosting provider and because sometimes it isn't one of the most requested stuff by subscribers. If you are planning to install an SSL certificate now or in the future please don't forget to check with your hosting company if the dedicated IP address is included and, if it isn't, how much that will cost if you would need to add it.


As for the DV (Domain Validation) SSL certificates, well-known as the cheapest and "for newbies" ones, these are issued through a process requiring an approvation by e-mail, completed by the domain administrator. Before of placing an order for that type of SSL certificate it's better to check if at least one of the "administrative" e-mail addresses (admin, administrator, hostmaster, webmaster and postmaster) is active without any automatic forward to another e-mail address. RapidSSL and GeoTrust can send that approvation e-mail to the "Admin Contact" on the WHOIS register.

Moving forward to the OV (Organization Validation) and EV (Extended Validation) SSL certificates the issuance requires an updated business licence, the GeoTrust official Acknoledgement Of Agreement (completely filled by the website responsible listed on the WHOIS and on the business licence) and a "fixed" phone number, called by GeoTrust to check if the Company is truly existing. That phone number needs to be listed on online phone registers, as "Duns & Bradstreet", "Whitepages", "Yell", etc. Sometimes GeoTrust would ask for a Professional Opinion Letter, signed by a lawyer.

In order to receive the requested SSL certificate with no delays it's very important to take care of the above usual requests; please feel free to contact Trustico in case you'd need more tailored informations.