Secure Server

If you're going to be doing e-commerce or any other activity that requires the exchange of private information, you should consider using a secured server (SSL, Secured Socket Layer) which encrypts the data passing between the browser and your web site via an SSL Certificate. This protects it from the prying eyes of hackers.

You have two options when considering a secured server. User our Shared Server or buy a private SSL certificate of your own. The main difference is that with a shared SSL server, you will use our secured server name (for example: dataencrypted.com), where as with a private certificate, you can use your own domain name. The benefit of using our shared SSL certificate is that there is no addiitional charge for using it.

You are welcomed to use our shared SSL certificate and server at no additonal charge. To secure a page on your site is to simply change the way you address it in a link or URL. The best way to understand this is by example. Using ez2ba.com as the domain name and a file called index.html in the /html directory as the page we wish to secure. A normal unsecured link would look like this:

http://ez2ba.com/html/index.html

But a secured link uses our secured server named "dataencrypted.com".

https://dataencrypted.com/ez2ba/html/index.html

So the changes that took place are:

• Change http to https
• Change the domain name to dataencrypted.com
• Use only the first part of your domain name as the fist subdirectory

Once you've made these changes in the link, you will see a lock in the status bar of your browser showing that the page is secured.

If you wish to have your own SSL Certificate so that your addressing scheme doesn't include the name of our secured server, this option is available via the GeoTrust QuickSSL icon where you can purchase your certificate at a significant savings over VeriSign or Thawte.

From your Command Center click on the GeoTrust QuickSSL icon.

First generate a Certificate Request Data (CSR) by clicking on the link for doing so. You'll then be asked for some information followed by a button to "Generate Certificate Request Data". This will generate a Certificate Signing Request [CSR] and an RSA Key. The CSR looks like this:

-----BEGIN CERTIFICATE REQUEST-----
askdjaASdqawreghjhJKIyTTGFFCVXSEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfgKKjEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfg askdjaASd
qawreghjhJKIyTTGFFCVXSEWeErRGFdS
DDFfg ==
-----END CERTIFICATE REQUEST-----

Next, click on the link to Order Secure Certificate. Fill in the administrative details and select the length of time for the certificate. Click on Submit to automatically send your information. You will be charged at this time. This charge is not refundable.

GeoTrust will then send an email to the admin email address provided. Follow the link and review the data that is pre-filled in for you. You should just review the information and keep hitting "Continue".

Once your certificate is issued, go back to the GeoTrust QuickSSL icon of your Command Center and click on Install Certificate. Paste in your certificate and follow the remaining instructions. The server will install the certificate within 15 minutes.

Please be sure to test your certificate after a few minutes. If you encounter any problems, send a Help Desk Ticket from your Command Center.

Using a non-GeoTrust certificate

Our servers do allow for the use of SSL certificates supplied by Thawte, VeriSign, Entrust, OpenSRS and Comodo. To install these certificates you can do the following.

1) Begin in the Command Center of yourdomain.com.
2) Click on the Secure Server button.
3) Then click on Generate Request.
4) Fill-out the form with the correct information.
5) Click on Generate Request at the bottom of the screen.

This will generate a Certificate Signing Request [CSR] and an RSA Key. The CSR looks like this:

-----BEGIN CERTIFICATE REQUEST-----
askdjaASdqawreghjhJKIyTTGFFCVXSEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfgKKjEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfg askdjaASd
qawreghjhJKIyTTGFFCVXSEWeErRGFdS
DDFfg ==
-----END CERTIFICATE REQUEST-----

6) Make and save a back-up copy of the CSR and Key (and key decryption password)
7) Then send the CSR to Verisign, Equifax or Thawte.

After asking for a lot of business verification information, Verisign, Equifax or Thawte, will send back a certificate. The certificate looks like this:

-----BEGIN CERTIFICATE-----
askdjaASdqawreghjhJKIyTTGFFCVXSEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfgKKjEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfg askdjaASd
qawreghjhJKIyTTGFFCVXSEWeErRGFdS
DDFfg ==
-----END CERTIFICATE-----

9) Using Control Panel -- install the certificate and previously saved key - be sure to put a return ("enter") between the two files.

The private key looks like this:

-----BEGIN RSA PRIVATE KEY-----
askdjaASdqawreghjhJKIyTTGFFCVXSEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfgKKjEWe
ErRGFdSsssdsFEWWddazdffssVWSWWSR
EwWgfFgJKooutrERe5574DDFfg askdjaASd
qawreghjhJKIyTTGFFCVXSEWeErRGFdS
DDFfg ==
-----END RSA PRIVATE KEY-----

For accounts with their own certificates:

Call the file from within your html pages, scripts or browser using:

https://yourdomain.com/file.html

To call file in personal cgi-bin:
https://yourdomain.com/cgi-bin/file.html

^Back to Top