SSL certification for WHM & Cpanel & Web-mail access
I wanna know what is the best SSL certification that I can use for a domain that is used for accessing email, through CPanel and WHM. I am getting this when accessing email via domain and WHM:
The site's security certificate is not trusted!
You attempted to reach XXX.XXX.XXX.XXX, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications.
You should not proceed, especially if you have never seen this warning before for this site.
Thanks in advance
New learner, and interested to know about Hosting and Web Design. So help me out.
You can get free SSL certificates with minimal effort with startssl.com
Just an extra note. Free StartSSL's are not meant to be used for commercial activities or financial transactions according to their policy
Megaspace Web Hosting Canadian Shared Web Hosting | Kitchener-Waterloo, Elmira, Listowel Web Hosting
ASSP Anti-Spam Email Filtering | cPanel Web Hosting | 24 x 7 x 365 Website Uptime Monitoring | Creative Web Design
Live Chat Support | Skype Support | English Speaking Tech Support | PHP/MySQL | www.megaspace.ca Host with us and get a Tim Card at Christmas!
The green bar shows increased trusthworthiness of your domain ( it is actually called EV (extended validation)).
Bluebar = The SSL certificate is only able to validate domain information only
GreenBar = The SSL certificate is able to validate domain, whois and company information, among other information.
To get greenbar, you have to purchase EV SSL, and you have to pay more money. Note that, in both the cases the connection should be 100% encrypted.
Normally EV SSL is not necessary just for cPanel / WHM access or for basic websites; a RapidSSL should be enough for that. Normally people opt for green bar for websites like ecommernce, banking for the trustworthiness to their users.
For service SSL ( like for WHM, cPanel, SMTP, FTP, etc ), you can purchase a new SSL for your server hostname, because only certificate can be installed for each of them. Then set both "SSL redirect destination" and "Non-SSL redirect destination" to hostname from WHM >> Tweak settings. That will redirect all except direct port access of the cPanel related services to hostname and thus to avoid SSL warnings. Sometimes this may confuse the clients, because when they access theirdomain.com/cpanel, it will direct to hostname:2087 and they may be panic due to the URL change. In such case you should teach them what is going on with that URL redirect or to enforce them access hostname to access cPanel / WHM all the time. For other services like SMTP, FTP, if they use server hostname they will not get a SSL warning. If they use their domain, they will get a warning says "this SSL is generated for "server hostname".
But for HTTP service, you can install SSL certificate for any domains using the SSL manage feature in WHM.