当前位置:网站首页>What should I do if the SSL certificate prompts that it is expired or invalid?
What should I do if the SSL certificate prompts that it is expired or invalid?
2022-08-05 06:15:00 【Chengyun Technology】
With the rapid development of the Internet today, people can easily access the Internet with just a smartphone, which has become an indispensable normal life for people.In order to improve network security and increase access protocol security, network providers will deploy SSL certificates on websites to improve website security and identification and prevent website data hijacking.
SSL certificate is a kind of digital certificate, which needs to be issued by a trusted CA, but there are not many institutions trusted by global browsers. In order to ensure compliance and security, the validity period of SSL certificates is fixed.
Why SSL certificates expire
The current maximum term of the SSL certificate is 13 months, and the normal issuance time is 1 year. The SSL certificate is not permanent and must be strictly protected, so the SSL certificate must update the private key and public key every year to upgrade the SSL certificateIn addition, the CA agency will verify the validity of the subject's identity every year, because the CA agency cannot ensure that the applicant is always in a legal state, and the current Internet era domain name transactions are also very complicated, which can easily lead to changes in domain name ownership or changes in business operations.Dynamic, so all CA institutions in the CA/B Forum Alliance voted to agree to the 1-year SSL certificate time. If the SSL certificate for more than 13 months cannot be used, he will be prompted by the browser as a dangerous SSL certificate, because the browser does not support more than 13 months.13 month SSL certificate.
Therefore, in order to ensure the validity and security of the website of the SSL certificate, the certificate management agency needs to ensure that the legitimate information and the latest information of the domain name and the main applicant are correct and valid. The SSL certificate has a validity period, and it needs to re-apply after the expiration.SSL certificate and reconfigure the SSL certificate, verify and verify the domain name or principal name.
What to do if the SSL certificate expires
About 15 days before the expiration of the SSL certificate is the best time to renew the SSL certificate. The SSL certificate must be renewed in advance to update the SSL certificate, because the website will stop visiting immediately after the SSL certificate expires, and an unsafe prompt will pop up "This website does notTrusted", which will reduce the trust of the website and user experience, and there is a risk of data leakage if the access is forced.
边栏推荐
- Remembering my first CCF-A conference paper | After six rejections, my paper is finally accepted, yay!
- Why can't I add a new hard disk to scan?How to solve?
- RAID disk array
- spark source code - task submission process - 2-YarnClusterApplication
- LinkSLA坚持用户第一,打造可持续的运维服务方案
- 入门文档03 区分开发与生产环境(生产环境才执行‘热更新’)
- NAT实验
- Image compression failure problem
- VRRP原理及命令
- dsf5.0 弹框点确定没有返回值的问题
猜你喜欢
Getting Started 05 Using cb() to indicate that the current task is complete
单臂路由与三成交换机
入门文档12 webserve + 热更新
Image compression failure problem
账号与权限管理
图片压缩失效问题
What?CDN cache acceleration only works for accelerating static content?
入门文档04 一个任务依赖另外一个任务时,需要按顺序执行
[Day5] Soft and hard links File storage, deletion, directory management commands
ACLs and NATs
随机推荐
Getting Started Doc 06 Adding files to a stream
有哪些事情是你做了运维才知道的?
[Day1] VMware software installation
King power volume LinkSLA, realize operations engineer is happy fishing
The problem of redirecting to the home page when visiting a new page in dsf5.0
Spark source code - task submission process - 4-container to start executor
【Day6】文件系统权限管理 文件特殊权限 隐藏属性
In-depth Zabbix user guide - from the green boy
【Day8】 RAID磁盘阵列
Mongodb查询分析器解析
LeetCode面试题
vim教程:vimtutor
ACL 和NAT
技术分享杂七杂八技术
spark operator-parallelize operator
Switch principle
添加新硬盘为什么扫描不上?如何解决?
TCP/IP four-layer model
IP数据包格式(ICMP协议与ARP协议)
vim的三种模式