glossary.categories.security

SSL Certificate

Également connu sous le nom de: TLS CertificateHTTPS CertificateDigital Certificate

A digital certificate that authenticates website identity and enables encrypted connections.

Définition

An SSL (Secure Sockets Layer) certificate is a digital certificate that authenticates the identity of a website and enables an encrypted connection between a web server and browser. Though technically superseded by TLS (Transport Layer Security), the term "SSL" is still commonly used. SSL certificates contain the website's public key, the certificate authority's digital signature, and identity information. They enable HTTPS connections, protecting data in transit and building user trust.

Exemples

Certificate Information

Key fields in an SSL certificate.

Certificate:
  Subject: CN=example.com
  Issuer: CN=Let's Encrypt Authority X3
  Validity:
    Not Before: Jan 1 00:00:00 2025 GMT
    Not After:  Apr 1 00:00:00 2025 GMT
  Public Key: RSA 2048 bit
  Signature Algorithm: SHA256withRSA
  SANs: example.com, www.example.com

Certificate Types

Different validation levels for SSL certificates.

| Type     | Validation        | Use Case              | Cost   |
|----------|-------------------|-----------------------|--------|
| DV       | Domain only       | Blogs, small sites    | Free-$ |
| OV       | Organization      | Business websites     | $$     |
| EV       | Extended          | Banks, e-commerce     | $$$    |
| Wildcard | *.domain.com      | Multiple subdomains   | $$     |

Cas d'usage

Securing website connections (HTTPS)
Protecting user data in transit
Building customer trust with security indicators
Meeting PCI DSS compliance requirements

Bonnes pratiques

  • Monitor certificate expiration dates
  • Use automated certificate renewal (Let's Encrypt)
  • Implement HSTS for HTTPS enforcement
  • Use strong TLS versions (1.2 or 1.3)
  • Monitor certificate transparency logs

Erreurs courantes

  • Letting certificates expire unexpectedly
  • Not monitoring all certificates (subdomains, etc.)
  • Using weak TLS versions or cipher suites
  • Mixed content warnings (HTTP resources on HTTPS pages)

FAQ

Mettez vos connaissances sur SSL Certificate en pratique

Commencez à surveiller votre infrastructure avec WizStatus.

Aucune carte de crédit requise • 20 monitors gratuits pour toujours