×

برای ورود به صفحه‌ی فارسی وب‌سایت ابر آروان کلیک کنید

产品
知识库
定价

How to Activate ArvanCloud Free SSL Certificate?

The ArvanCloud SSL certificate can be easily activated and automatically renewed for your website using the ArvanCloud CDN service.
With a single click, you can make your website secure. Sign up and enjoy the hassle-free, auto-renewable ArvanCloud SSL certificate free of charge.

A More Secure CDN Experience

Secure web-based data transmission is one of the biggest global challenges. Millions of users’ personal data, be it their bank account information or their text messages, are being exchanged over the Internet every day, which is why new attacks have emerged to access such vital information. The lack of security leading to leakages of such information can have dire consequences of causing irreversible losses to individuals and businesses while also tarnishing the reputation of website or application owners.

Encrypted web-based information exchange is a crucial step to prevent such scenarios, and ArvanCloud is proud to be among the very few CDN providers across the globe to provide this feature by offering free CDN SSL certificates.

What’s an SSL Certificate?

Preparing an SSL certificate is the first step for a website to support HTTPS. The SSL certificate is a prerequisite for the TLS protocol to establish a secure connection between the server and the client (browser).
SSL certificate includes information used in the TLS handshake process. The information may include general information about the identity of the website owner (domain name and the affiliated organization) and public key etc.

Why Use an SSL Certificate?

The TLS protocol functions are based on symmetric and asymmetric cryptography. To secure transmission, asymmetric cryptography or publish key infrastructure (PKI) uses two keys, private and public, unlike symmetric cryptography, which uses a single shared secret key for encryption and decryption between two points.

Public and private keys are generated on the web hosting server, although the private key is stored securely and not transmitted to the outside world. The public key, on the other hand, can be freely shared. The one receiving the public key uses it to encrypt their data before sending it to the server, while the server decrypts the encrypted data using its private key.

The public key is at a high risk of exploitation because of its shareability. For this reason, an extra security level is implemented to verify the identity of the public key to solve this problem. An SSL certificate carries out this identity verification.

When creating a free SSL certificate for a website, the first step is to generate a certificate signing request (CSR). This file is the SSL certificate before it is signed by the certificate authority (CA), and it contains information on the website owner and the public key. Once the requirements are met, this file is sent to a CA to be signed. The SSL certificate is sent back to the website owner to be installed on the webserver. The server uses this certificate to identify itself to the browser during the TLS handshake. The certificates have expiration dates and should be renewed through the same procedure after expiry. The HTTPS connection between the browser and the web server fails if any steps are improperly performed.

All browsers include a list of trusted CAs, based on which they can confirm the authenticity of the information and public keys received in certificates signed by any of those CAs.

1Generate Certificate Signing Request (CSR)2Get signed by Certificate Authority3Install certificateon Origine Server4Repeat when certificate expires

How is the SSL certificate used in the TLS handshake?

Following the establishment of a TCP connection between the client and server, the TLS handshake is initiated. The steps involved in this process (regardless of the TLS version) are briefly explained as follows:

one

The browser sends a “client hello” message containing the version of the TLS or SSL and its supported encryption algorithm to the server.

two

The server responds with a “server hello” message containing one of the algorithms supported by the browser and its SSL certificate.

three

The browser validates the SSL certificate by checking its list of trusted CAs and accepts the certificate. The browser then generates a Secret Key, encrypts it with the public key it received from the server, and sends it to the server in a message.

four

The message received by the server is decrypted using the private key to obtain the Secret Key sent by the browser. The TLS connection is now established between the browser and server, and the exchanged data is encrypted and decrypted with the help of the secret key.

ssl-handshake

ArvanCloud Offers Free SSL Certificates

免费
VS.
digicert
Standard SSL
$198 USD 1-year Price
Single domain
comodo
Standard SSL
$146.24 USD 1-year Price
Single domain
globalsign
Standard SSL
$249 USD 1-year Price
Single domain

Through negotiations with Let’s Encrypt, ArvanCloud has provided its users with the possibility of generating a free 3-month CDN SSL certificate with a single click. Hence, ArvanCloud users can get this CDN SSL certificate free of charge and have it renewed automatically at the time of expiration. These free CDN SSL certificates are provided as wildcards.

Wildcard SSL Certificate

The Wildcard SSL Certificate can secure an unlimited number of subdomains with a single SSL certificate. Unlike the standard SSL certificates, which are bound to a single FQDN such as www.example.com, the Wildcard SSL certificate can also be used for *.example.com, where * can be any prefixes (www.example.com, example.com, test.example.com, etc.).