About SSL Certs

Learn about SSL certificates and how Forge provides secure connections for your websites.

Overview

SSL (Secure Sockets Layer) certificates are essential for providing secure, encrypted connections between your website and visitors' browsers. Forge automatically handles SSL certificate provisioning and management for all your sites.

What are SSL Certificates?

SSL certificates are digital certificates that provide secure, encrypted communication between a web server and a user's browser. They ensure that data transmitted between the server and browser remains private and secure.

Automatic SSL Provisioning

Forge automatically provides SSL certificates for all sites, ensuring secure connections without any manual configuration required.

How SSL Works

The SSL process involves several steps:

1. Handshake: Browser and server establish a secure connection
2. Certificate Verification: Browser verifies the server's SSL certificate
3. Key Exchange: Encryption keys are exchanged securely
4. Encrypted Communication: All data is encrypted during transmission

Types of SSL Certificates

There are several types of SSL certificates available:

• Domain Validated (DV): Basic validation, suitable for most websites
• Organization Validated (OV): Enhanced validation with organization details
• Extended Validation (EV): Highest level of validation and trust
• Wildcard Certificates: Cover multiple subdomains
• Multi-Domain Certificates: Cover multiple domains

SSL Features

Forge's SSL certificate system includes:

• Automatic Provisioning: SSL certificates are created automatically
• Custom Domain Support: SSL for all custom domains
• Wildcard Certificates: Support for subdomain SSL
• Auto-Renewal: Certificates are automatically renewed
• HTTPS Enforcement: Secure connections by default

Benefits of SSL Certificates

SSL certificates provide numerous benefits:

• Data Encryption: Protects sensitive information
• Authentication: Verifies website identity
• Trust Indicators: Shows padlock icon in browser
• SEO Benefits: Improves search engine rankings
• Compliance: Meets security standards and regulations
• Encrypted data transmission
• Protection against man-in-the-middle attacks
• Enhanced user trust and confidence

HTTPS vs HTTP

The difference between HTTP and HTTPS:

• HTTP: Unencrypted, vulnerable to interception
• HTTPS: Encrypted, secure communication
• Port 80: Standard HTTP port
• Port 443: Standard HTTPS port

Configuration

SSL certificates are configured automatically when you:

• Deploy a new site to Forge
• Add a custom domain to your site
• Update your site's domain settings

SSL Certificate Validation

SSL certificates go through different levels of validation:

• Domain Validation: Verifies domain ownership
• Organization Validation: Verifies business identity
• Extended Validation: Comprehensive business verification

Verification

You can verify SSL certificate status by:

• Checking the padlock icon in your browser
• Viewing certificate details in browser settings
• Using online SSL checker tools
• Reviewing your site's security status

Common SSL Issues

Some common SSL certificate issues include:

• Expired certificates
• Mismatched domain names
• Untrusted certificate authorities
• Mixed content warnings
• Certificate chain issues

Best Practices

Follow these best practices for SSL certificates:

• Use strong encryption algorithms
• Keep certificates up to date
• Monitor certificate expiration dates
• Use trusted certificate authorities
• Implement proper redirects from HTTP to HTTPS