Signing SSL certificates
When a user wants to make an SSL connection with a host that requests client certificates, the user creates a certificate of their own and sends the generated certificate signing request to the server administrator, usually via email. The administrator uses this page to sign the request, which creates a new certificate that can be sent back to the user. The user can then use that certificate to make an SSL connection with the host.
To sign an SSL certificate signing request:
- From the main menu, select . The SSL Certificates page opens.
- At the bottom of the page, select the link. The Select a Certificate Signing Request (CSR) to sign page opens.
- Select whether you want to a certificate signing request (as a .csr file) or from the certificates database. (All certificates listed in the Select a CSR to sign list have valid certificate signing requests. Only imported certificates for which no .csr file was included are not listed.)
- Select the certificate with which you want to sign the certificate signing request. You can use an SSL certificate in the certificates database to sign a certificate signing request.
- Specify the and date for the new signed certificate. The certificate is not valid before the activation date or after the expiration date.
- Click . The SSL Certificates page opens with a link to download the new signed certificate in the message bar at the top of the page.