当前位置:网站首页>What should I do if the SSL certificate prompts that it is expired or invalid?
What should I do if the SSL certificate prompts that it is expired or invalid?
2022-08-05 06:15:00 【Chengyun Technology】
With the rapid development of the Internet today, people can easily access the Internet with just a smartphone, which has become an indispensable normal life for people.In order to improve network security and increase access protocol security, network providers will deploy SSL certificates on websites to improve website security and identification and prevent website data hijacking.
SSL certificate is a kind of digital certificate, which needs to be issued by a trusted CA, but there are not many institutions trusted by global browsers. In order to ensure compliance and security, the validity period of SSL certificates is fixed.
Why SSL certificates expire
The current maximum term of the SSL certificate is 13 months, and the normal issuance time is 1 year. The SSL certificate is not permanent and must be strictly protected, so the SSL certificate must update the private key and public key every year to upgrade the SSL certificateIn addition, the CA agency will verify the validity of the subject's identity every year, because the CA agency cannot ensure that the applicant is always in a legal state, and the current Internet era domain name transactions are also very complicated, which can easily lead to changes in domain name ownership or changes in business operations.Dynamic, so all CA institutions in the CA/B Forum Alliance voted to agree to the 1-year SSL certificate time. If the SSL certificate for more than 13 months cannot be used, he will be prompted by the browser as a dangerous SSL certificate, because the browser does not support more than 13 months.13 month SSL certificate.
Therefore, in order to ensure the validity and security of the website of the SSL certificate, the certificate management agency needs to ensure that the legitimate information and the latest information of the domain name and the main applicant are correct and valid. The SSL certificate has a validity period, and it needs to re-apply after the expiration.SSL certificate and reconfigure the SSL certificate, verify and verify the domain name or principal name.
What to do if the SSL certificate expires
About 15 days before the expiration of the SSL certificate is the best time to renew the SSL certificate. The SSL certificate must be renewed in advance to update the SSL certificate, because the website will stop visiting immediately after the SSL certificate expires, and an unsafe prompt will pop up "This website does notTrusted", which will reduce the trust of the website and user experience, and there is a risk of data leakage if the access is forced.
边栏推荐
- Getting Started Doc 06 Adding files to a stream
- ROS video tutorial
- 【Day8】 RAID磁盘阵列
- 入职前,没想到他们玩的这么花
- Call the TensorFlow Objection Detection API for object detection and save the detection results locally
- The problem of redirecting to the home page when visiting a new page in dsf5.0
- The idea of commonly used shortcut key
- 实力卷王LinkSLA,实现运维工程师快乐摸鱼
- 时间复杂度和空间复杂度
- dsf5.0新建页面访问时重定向到首页的问题
猜你喜欢

【Day8】(超详细步骤)使用LVM扩容

Account and Permission Management

I/O性能与可靠性

Remembering my first CCF-A conference paper | After six rejections, my paper is finally accepted, yay!

账号与权限管理

Getting Started Document 09 Standalone watch

lvm logical volume and disk quota

The highlight moment of operation and maintenance starts with intelligence

VLAN details and experiments

Small example of regular expression--validate email address
随机推荐
In-depth Zabbix user guide - from the green boy
实力卷王LinkSLA,实现运维工程师快乐摸鱼
The spark operator - repartition operator
IP数据包格式(ICMP协议与ARP协议)
spark operator-wholeTextFiles operator
入门文档01 series按顺序执行
【Day1】(超详细步骤)构建软RAID磁盘阵列
入门文档09 独立的watch
Getting Started 11 Automatically add version numbers
I/O performance and reliability
【Day8】 RAID磁盘阵列
正则表达式小示例--获取重复最多的字符及其数量
time complexity and space complexity
Transport layer protocol (TCP 3-way handshake)
One-arm routing and 30% switch
Technology Sharing Miscellaneous Technologies
[Day8] Commands involved in using LVM to expand
spark算子-textFile算子
Small example of regular expression--validate email address
Dsf5.0 bounced points determine not return a value