[iain2_uk]

When inputting the info for the SSL, I have a couple of queries before I go ahead:-

1. The Domain name - can this be the customers main domain, or does it need to be a sub-domain. (If using the main domain, does that mean the site can be accessed via http or https?)

2. The form asks for a username and password for delivery - would this be an email address and password of my choice (the reseller) or should it relate to the end user customer?

Cheers

[Matt]

Hi Iain,

It can be any external domain on the internet - yes, so it could be accessed via http and https.

A username and password you set for the delivery - it'll never really be needed as it is mailed to you anyway.

Matt

[iain2_uk]

Thanks Matt,

I'll get the CSR generated tonight and submitted (I've generated one aleady, but not submitted it, however the info was wrong, so I'll start it again)

Cheers

[iain2_uk]

Finally (I hope),

Where in my WHM do I find my dedicated IP, and how do I apply that to the relevant end-user account?

[Matt]

Hi Iain,

Once you have the cert - let us know and we assign that for you.

Matt

[iain2_uk]

I'm a bit concerned, after reading the SSL policy document from the certificate purchased from you which states:-

PositiveSSL Certificate
PositiveSSL Certificates are low assurance level Secure Server Certificates from
Comodo ideal for mail servers and server to server communications. They are not
intended to be used for websites conducting e-commerce or transferring data of
value. Only the InstantSSL, InstantSSL Pro, PremiumSSL, PremiumSSL Wildcard,
Elite SSL, Gold SSL, Platinum SSL and Platinum SSL Wildcard certificates are
intended for an e-commerce environment.
As PositiveSSL Certificates are not used commercially, the relying party does not
require Comodo, the trusted third party, to provide a warranty against mis-issuance.
In accordance with section 4.2.7 (Validation Practices) of this CPS, PositiveSSL
Certificates utilize third party domain name registrars and directories to assist with
application validation in order to provide increased speed of issuance. Where
possible, the third parties will be used to confirm the domain control of a certificate
applicant. If the directory cannot be used to sufficiently validate a certificate
applicant�??s domain control, further validation processes may be used. These may
include an out of bands validation of the applicant�??s submitted information.
Due to the increased validation speed and the nature of how PositiveSSL intends
PositiveSSL certificates to be used, the certificates carry no warranty..
Subscriber fees for a PositiveSSL Certificate are available from the official
PositiveSSL website.
l) PositiveSSL Wildcard Certificate
PositiveSSL Wildcard certificates are low assurance Secure Server Certificates from
Comodo ideal for mail servers and server to server communications. They are not
intended to be used for websites conducting e-commerce or transferring data of
value. Only the InstantSSL, InstantSSL Pro, PremiumSSL, PremiumSSL Wildcard,
Intranet SSL, Elite SSL, Gold SSL, Platinum SSL and Platinum SSL Wildcard
certificates are intended for an e-commerce environment. 

As my client is wanting his SSL cert for e-commerce, surely this is not the correct certificate for this - it indicates this is for mail servers and server-to-server, rather than websites

[Matt]

Iain,

A certificate - no matter what they are labelled as, will always provide you the standard SSL function.

You could even use a self-signed one but most people do not due to the errors and pop up messages before loading the SSL content informing on untrusted/unknown certificate issuer.

The fundamental purpose of SSL is to protect the data to and from a host computer by encrypting it. Any SSL certificate be it self signed, domain control validated and business ID verified - all do the same thing.

Domain control validated means that you have avoided verifying your business - which means you have to wait 3-7 days whilst someone manually checks your company details. This has barely any advantage over a domain validated domain.

The only main difference is that verified domains offer you a guarantee should the cert be faulty. However, you know this when you first load it. If it loads with errors - it is not installed correctly, if it does not - you are good to go.

We offer certain types of certs that we know will work flawlessly with our hosting. We're able to offer validated SSL certs if you really feel the need for that, just let me know and we'll get you some info.

Hope that has managed to clear that up for you.

Matt