SSL Certificate FAQs

How does SSL work?
What is a "common name"?
Once I have SSL certificate has been issued, how do I install it?
How do I know my site is secure?
How do I redirect my customers to my site securely?
What does "Enables up to 256-bit SSL encryption" mean?
What happens if I lose my private key?
If I cancel my SSL certificate, will I get a refund?
What if I do not wish to renew my certificate?
How does the Warranty Coverage on the SSL certificate work?

1. How does SSL work?

2. What is a "common name"?

A common name is the hostname provided at the time the CSR is generated. This will be the hostname the certificate is signed for. For example, if your secure URL is https://www.domain.tld then your common name is "www.domain.tld"

3. Once I have SSL certificate has signed, how do I install it?

If you currently have a hosting package with TierraNet matching the URL (common name) on the issued SSL certificate, your certificate will automatically be installed. Otherwise, installation instructions will be provided with every issued certificate.

4. How do I know my site is secure?

If your certificate is installed and working, you can test it out by visiting your site securely. Simply put "https://" in front of your signed common name, for example if the common name you used is "www.domain.tld" then the secure URL will be "https://www.domain.tld".

5. How do I redirect my customers to my site securely?

There are a variety of ways to accomplish this. Not every page of most websites needs to be secure. The easiest way is to hyper-reference the user to the "https" version of your site. For instance, if you have a login page, you can create a link on your homepage so that when clicked, it will navigate them to the secure login page, eg. "https://www.domain.tld/login/"

6. What does "Enables up to 256-bit SSL encryption" mean?

If you generate your own CSR and private key, you can specify the encryption strength. The encryption strictly protects against brute-force cracking methods. Currently we use 256-bit for the Extended Verification certificates and 128-bit for all others. 256-bit isn't twice as good" but rather it has 128 more bit combinations or 2¹²⁸; even still, 128-bit is widely used and it is the currently accepted encryption strength level. Because even with ever increasing computer power, it would take an unbelievably long time to brute-force a 128-bit encrypted website.

7. What happens if I lose my private key?

You can generate a new CSR and private key and submit your new CSR for resigning. The new certificate will have the same issued time remaining as the original signed certificate.

8. If I cancel my SSL certificate, will I get a refund?

Yes, your certificate can be canceled within 7 days of the certificate being signed. No refunds are given 7 days after the certificate has been signed.

9. What if I do not wish to renew my certificate?

Your certificate WILL NOT be automatically renewed however you will receive notices close to the expiration date of the issued certificate. If you do not wish to process secure transactions with your current SSL certificate, no action needs to be taken, simply ignore the renewal notices and do not renew your certificate.

10. How does the Warranty Coverage on the SSL certificate work?

Each SSL certificate comes with a level of warranty ranging from $10,000 to $150,000. The warranty protects the end user if the certificate is ever mis-issued by the provider. A higher warranty provides a higher value to the certificate being issued.