The IT Sea of Acronyms

Defining SSL Certificates

If you are new to computer networks, as with most industries, there is a long list of terms and acronyms to learn. One that should be high in priority is the SSL Certificate. The acronym is related to system security, which is high on the priority list for all IT professionals.

What is an SSL Certificate?

The SSL stands for Secure Sockets Layer, a secure protocol developed for sending information securely over the internet. Many websites use SSL for secure areas within their websites, such as user account pages and online checkout. Usually, when you are asked to "log in" on a site, the resulting page is secured by SSL.

SSL Certificates are small files that can bind a cryptographic key to an internet server. It enables sites to operate in HTTPs mode, which allows secure encrypted connections between your computer and the webserver. You can tell if the webpage you're on is using SSL based on the padlock icon in the URL bar. (See Image 1) SSL Certificates were used first for credit card transactions, and website secure logins. Today it has become more prevalent in other areas as security has become front and center when dealing with the internet.

Image 1

How do SSL Certificates work? 

Essentially, for SSL to work there is a public key and a private key. When you first connect to a website or server using SSL, it will send you an encrypted public key. Your computer checks the SSL Certificate that it receives, and verifies that the certificate is valid. Once the certificate is verified, your computer will send an encrypted private key back to the server.

 The interaction sets up an encrypted communication between your browser and the website. Since only your computer knows the private key that was generated, if anyone were to intercept the communication between you and the server, they would only see a cryptographic code with no way to decrypt it.

Where to get SSL Certificates?

You can buy SSL Certificates online through companies known as Trusted Certificate Authorities. The companies will provide you with a key to apply to your server. Installation is a generally simple process. You can also create your own SSL.