How do I get a DigiCert certificate?

How do I download intermediate certificates?

On the "Download Certificates" page, there is a button for "Download Intermediate Certificates".

This will download the intermediate certificates that you need to enable your certificate. For example: If you are downloading a root certificate, you will also need a trusted intermediate certificate. You will see all available intermediate certificates when you select the appropriate intermediate certificate type. After downloading the intermediate certificates, you need to go to the intermediate certificate section and import them. Go to the "Certificates" section and import all certificates that you downloaded. You need to import all certificates in all sections, not just the root certificate, as it may be used by different sections. If you have a root certificate, you can choose to save it directly in the "Root" section, and all intermediate certificates will automatically be imported to that section. If you imported all certificates, you can export them. You will see a progress bar on the bottom of the page to indicate the export is complete.

We've been receiving reports from some customers that they are unable to generate signed OCSP requests. Because of an error. We've identified a fix and plan to release it this week. Until then, if you are
Receiving this error, we suggest disabling the certificate generation by adding --sign-cert-reqs. To the parameters used to launch the generated OCSP signing requests. Hi @Kludgy-Nerd. I just followed this article to try to create my own intermediate certificate. I have the following question(s) about the process.

What is the reason for the following warning?

How do I get an intermediate certificate from DigiCert?

I need to do this so that I can use SSL on a page that I host on the server. Thanks in advance. First of all you have to make sure you have a valid Intermediate Certificate. From your description, it doesn't seem you're running a web server, so I'm assuming you have a dedicated machine that you've provisioned to act as a server.

When you deploy your SSL app (in my case it's PHP, but I assume you're interested in the general concepts regardless of platform), there will be a step that involves generating a self-signed certificate. I believe for production apps that would typically happen at the very beginning of the deploy process. Once you have a generated cert, and you've signed it, you can deploy your app to the server that's hosting the SSL certificate. If you get to this step, you'd then have your SSL cert configured.

Digicert has a detailed document on how to configure your SSL certificate for Apache/Nginx here. If you're running your app as a Windows service, then you'll need to install the Microsoft .NET framework on your machine. That's a long and involved process.

How do I get an intermediate CA certificate?

I have a client who would like me to create the intermediate CA certificate.

The problem is that, from my perspective, as an intermediate CA certificate is part of a certificate chain, I do not have direct access to the files that constitute the intermediate certificate(s). Therefore, I cannot generate the intermediate CIs this right or wrong, and what are the steps to getting an intermediate CA certificate? EDIT : I have been advised that the intermediate CA certificate should be part of the final CA certificate chain. So my client is trying to get me to write a CSR for the final CA certificate with this intermediate CA in it. How do I create a CSR with a given certificate chain as defined above?
To put it simply: Intermediate certificates are not certificates! They serve the purpose to be part of a certificate chain. They may, if they are part of the PKIX Certification Path Validation process, also use the same validation algorithms as certificates in their calculation. These are usually described as verification algorithms.

Usually, a root CA sign its own certificate as certificate, and intermediate CAs sign their own certificate as X.509v3. These two types are the most important ones. Other intermediates (eg an OCSP signer) may go in between and sign both as X.509v3 and X.509v2, and also use algorithms like MD2 and MD5, which cannot be used with v3.

If you look at the Certificate Signing Request file, you will often see a subject alternative name (SAN) line, telling the requestor which certificate to use. If there is a root certificate in the requestor's key, this line tells the requestor which certificate of the intermediate CA to use. The requestor then signs his request with the intermediate CA's certificate, and submits the request as a whole (with the signed root CA's certificate in it) to the intermediate CThe intermediate CA signs the request and sends the request to the final CA for validation.

Intermediates can only sign in the way described above, and thus can never sign themselves out of this certificate chain. Their own certificate serves no purpose at all.

How do I get a DigiCert certificate?

Getting a DigiCert SSL certificate is easy.

Just create an account, select the certificate option and select one of the certificates provided. If you have questions or would like to discuss your options for setting up a secure e-commerce site, please contact us at sales@digicert.800.331.3632.

What is SSL? SSL stands for Secure Sockets Layer. SSL is a security technology used for transferring data between a client and a server. The SSL certificate from DigiCert issued for your domain name by a third party (Certificate Authority).

Where do I use SSL? Use SSL when you want to protect sensitive information about customers and employees. Our secure e-commerce platform allows you to use SSL when you create a secure online shopping cart. SSL gives customers the confidence that their credit card information will be safe and private.

Do I have to purchase an SSL certificate? No, we provide free SSL certificates with our secure e-commerce platform. With an SSL certificate from DigiCert, customers can access your secure e-commerce site without being prompted for a username and password.

How do I set up a secure shopping cart on my website? Secure your shopping cart with SSL by adding a code to your website. A security icon in the address bar of your browser tells customers their session is encrypted. A simple, free process that takes just a few minutes, your secure shopping cart is ready.

What are the benefits of SSL? SSL gives customers confidence in your site's security and privacy. When SSL is enabled, customers will see a green lock in their web browser that lets them know their session is secure and they can be sure that the information they submit to your site is secure.

What should I consider before enabling SSL? DigiCert provides three types of certificates: Self-Signed - This certificate is self-signed. Customers using this certificate will see a green lock in their web browser that lets them know their session is encrypted.

DigiCert Positive SSL Certificate - This certificate issued by a trusted Certification Authority. DigiCert Positive Extended Validation SSL Certificate - This certificate issued by a trusted Certification Authority.