CA is the issuing authority of the certificate and it is the core of PKI. CA is the authority responsible for issuing certificates, authenticating certificates, and managing issued certificates. It should develop policies and specific steps to verify, identify user identities, and sign user certificates to ensure the identity of the certificate holder and the ownership of the public key.
CA certificate is an e-commerce certification authority, also known as e-commerce certification center. It is an authoritative organization responsible for issuing and managing digital certificates. As a trusted third party in e-commerce transactions, it is responsible for the public key The responsibility for verifying the validity of the public key in the system is generally also called an SSL certificate. The specific application process is as follows:
The first step is to generate and submit a CSR (Certificate Signing Request) file
CSR files can generally be generated online (or generated on the server). Apply When a person creates it, the system will generate two secret keys, the public key CSR and the key KEY. After selecting the SSL certificate application, submit the order and submit the generated CSR file to the CA issuing authority where the certificate is located.
The second step is for the CA agency to verify
The CA agency has two verification methods for the submitted SSL certificate application:
The first is domain name certification. The system will automatically send a verification email to the administrator's email address of the domain name (this email address is the domain name contact email address queried through WHOIS information). After receiving the email, the administrator confirms that it is correct and clicks "I Confirm" to complete the email verification. All models of SSL certificates must undergo domain name authentication.
The second type is enterprise-related information certification. For companies that apply for OV SSL certificates or EV SSL certificates, in addition to domain name certification, they must also manually verify company-related materials and information to ensure the authenticity of the company.
The third step, the CA agency issues the certificate
Because the SSL certificate application models are different, the materials and methods of verification are somewhat different, so the issuance time is also different.
If you are applying for a DV SSL certificate, it can be issued in about 10 minutes at the fastest. If you are applying for an OV SSL certificate or EV SSL certificate, it will usually be issued in 3-7 working days.