• TLS/SSL Certificate Brands
    • RapidSSL - simple site security for less. It provides basic level customer confidence with the https, closed padlock and a static trust mark.
    • A range of digital certificate and trust products enable organizations of all sizes to maximize the security of their digital transactions cost-effectively.
    • The ideal solution for enterprises and large organizations. The Internet most recognized and trusted SSL brand.
    • A quick, cost-efficient, and effective solution to build secure connection. PositiveSSL certificates show your customers you’re employing serious security measures to keep their transactions and data safe.
    • SECTIGO, formerly COMODO CA, Creating trust online for individuals, e-merchants, enterprise, with its robust SSL security.
    • i
      How organizations best manage their certificate lifecycle?


      Download E-book
  • Certificate Products
    • Single Domain SSL
      One for main domain with free 'www' coverage.
    • Wildcard SSL
      Protect unlimited sub domains under main website.
    • Multi-Domain SSL
      One certificate for multiple domain names.
    • Domain Validation SSL
      It is quick and cost-efficient, really. Basic protection.
    • Organization Validation SSL
      It gives your website an online idenity. For SMBs to strengthen web trust.
    • Extended Validation SSL
      Stand out your buiness entity, protect brand and transactions.
    • Email (Client) Certificate
      Encrypt and signed email, enable two-factor authentication, and implement strong digital trust practices throughout your organization.
    • Code Signing Certificate
      Boost Software Adoption and improve customer's trust with Code Signing. Digitally sign Code across popular platforms.
  • Domain
    • Domain Reseller
      Reseller Pricing & TLDs
    • Transfer Domain
      Transfer domain into BestCert
  • Site Builder
  • PKI Solutions
  • Partner
如何为IP地址申请SSL证书? 详细步骤教程

SSL证书通常颁发给全限定域名 (FQDN),例如“www.bestcert.net”。然而是否可以在 SSL 证书中使用 IP 地址来代替全限定的域名?答案是肯定的。在许多案例中,企业希望对IP地址进行SSL认证。那么IP 地址获取 SSL 证书的过程和域名有什么不同呢? 

图片

1. 使用IP SSL证书的利弊


优点:使用IP SSL证书实现https://+ip  地址的访问可以防止攻击者对域名DNS劫持造成的访问问题。


缺点:当服务器IP经常发生变化时,往往需要通过重签的方式来获取新的IP SSL证书,过程繁琐;而使用域名SSL证书,当IP地址发生变化时,仅需要修改域名的解析IP地址,而不会影响到证书的有效性。


2. SSL证书对IP地址的要求和限制



您无法获得私有IP地址的SSL证书。受信任的 CA (证书颁发机构)不可能验证私有IP 地址的真实性和唯一性。申请SSL证书的IP地址必须是可通过 Internet访问的公共IP,这个是IP地址申请SSL证书的必要条件。


3. 哪些类型的SSL证书支持IP地址


非通配符的域名验证型证书(DV)和组织验证型证书(OV)均支持IP地址的证书签名请求;扩展验证型证书(EV)不支持IP地址的申请。


4. 在申请含FQDN的多域名证书时,可以将一个或者多个IP地址作为SAN吗



可以(除扩展验证型(EV)证书外)。


5. 如何生成IP地址的证书签名请求(CSR)



在“域名”或者“通用名称”字段填写对应的IP地址即可生成IP地址的证书签名请求(CSR)。

图片


6. IP SSL证书的验证方式有哪些



证书颁发机构必须能够通过文件验证来验证您对 IP 地址的控制(您需要上传指定文件并可以通过 HTTP/HTTPS 访问)(仅支持80或者443端口)。


当您通过文件验证后,您就成功地为IP地址申请了一张SSL证书。如果选择组织验证型的SSL证书,CA(证书颁发机构)则会在证书签发前进一步核实组织的信息。


选择聚力诚信,涵盖所有市场主流的SSL证书类型和品牌,从SSL证书的申请,验证,安装,证书专家全程在线支持!





Chat Now

Email Us

Email Address:

sales@bestcert.net

Top