Differences

This shows you the differences between two versions of the page.

--- creating_valid_startssl_certificates [07.03.2015 08:36] – Pascal Suter
+++ creating_valid_startssl_certificates [27.10.2016 17:28] – Pascal Suter
@@ Line 1: / Line 1: @@
-====== Creating Validated StartSSL Certificates ======
+====== Creating Validated SSL Certificates ======
 this is just a bunch of steps i can't seem to remember each time i need a new certificate.. so i write it down in here :)
-first of all you need to create a user account at startssl.com and download and install the mime certificate from them that will authenticate you against their service.
+I used to use startssl.com as they are free. but eventually i got annoyed by having to renew my certificates every year and messing around with the client certificate needed to acecss their customer portal, so i changed over to gogetssl.com which sell ridiculously cheap (as in $4 per year) certificats which last 3 years and all you need to access the portal is an email address and password :)
-now you need to run the validations vizard and validate your ownership of the domain you need a certificate for
+with most providers of simple domain verification certificates, you usually need to prove ownership of a domain by receiving an email at webmaster@domain or some other @domain email address THEY propose.
 ===== SSL Certificate =====
@@ Line 37: / Line 37: @@
 now **reload apache**
+==== sec_error_ocsp_unknown_cert ====
+shortly after updating (orp probalby also creating) a certificate with startssl firefox might not allow you to access the site, returning an error sec_error_ocsp_unknown_cert. this is because apparently startssl's ocsp server needs to reload its cached entries first in order for the new certificates to be usable through firefox. so just allow it some time to catch up and it should all work.