Certification Authority is an organization or company that validates entities’ identities (individual, websites, business, or email addresses) and binds them to cryptographic keys through the electronic document issuances referred to as digital certificates.

A leading CA will:

Certificate discovery is the process of identifying and reporting SSL/TLS certificates on your network using sensors. Sensors are small software applications responsible for finding SSL/TLS certificates installed in strategic locations on a particular network.

Discovery and Automation is a feature that identifies, monitors and automatically renews certificates installed across a network. Discovery and Automation give users complete control over their chosen security solutions.

Elliptic Curve Cryptography (ECC) is the latest encryption standard available. It promises more robust security, increased performance, a shorter key length. The shorter key lengths make ECC an ideal choice for devices with limited storage or resources. If we compare the RSA and DSA algorithms, a 256-bit ECC key is equal to a 3072-bit RSA key. Smaller key sizes require less computing 2power, meaning faster and secure connections. Read More 

Extended Validation SSL certificates represent the highest level of trust and authentication available in the industry. Organizations undergo a more rigorous verification process than that required for a DV or OV certificate. Therefore, organizations with an EV certificate are granted the highest trust level by customers and professionals industry-wide. EXTENDED VALIDATED CERTIFICATES (EV) 7-10 days to issue

Public key cryptography or public-key encryption is an encryption method that uses two separate keys. One is the public key, which is available for anyone to use. The other key is the private key which is known to the owner of the data. The data encrypted with the public key can only be decrypted and read with the private key and vice versa, making it a secure method to protect confidential data from authorized access and exploitation. Read More 

RSA is an algorithm for public-key cryptography. RSA works based on a public and private key. A public key is used to encrypt data before sending it to the server on which the certificate is located. Every user attempting to connect with the site is sent to the public key. The private key is used to decrypt the data encrypted by the public key. It is essential to ensure no one has access to your private key except you as the data owner. Read More 

The HTML code (“div” container block) displays the DigiCert Site Seal on your web page. Paste the “div” portion of the code into your page code wherever you want the seal to appear on the web page.

Subdomains act as an extension of your domain name to help organize and navigate your website’s different sections. You can also use a subdomain to send visitors to a completely different web address, like your social media page, or point to a specific IP address or directory within your account.

shop.localhost/ssl

Before CA can issue any certificate, the certificate order must first go through a validation process. For OV and EV TLS/SSL, Private SSL, Code Signing, and Document Signing certificate orders, the certificate’s validation process includes organization validation and verifying the organization contact.

For certificates issued to a domain (TLS/SSL and some client certificates), the certificate order process includes domain validation.

To quicken the certificate issuance process, you’ll want to submit your organizations and domains for pre-validation. Once you’ve completed pre-validation, future certificate issuance and renewals for those domains and organizations can be done almost immediately.

An SSL Wildcard certificate is a single certificate with a wildcard character (*) in the domain name field. This allows the certificate to secure multiple subdomain names (hosts) of the same base domain.

For example, a wildcard certificate for *.(domainname).com, could be used for www.(domainname).com, mail.(domainname).com, store.(domainname).com, in addition to any additional sub domain name in the (domainname).com.

Spam scan will check 3rd party spam lists to make sure that the customers IP address is not reporting. If a website was found on one of these blacklists, all outgoing emails are likely to bypass the recipient’s inbox and go straight in to their spam folder until the IP is removed from the list.

Short for malicious software, malware is designed to harm or secretly access a website without the owner’s knowledge. Websites hosting or linking to malware or malicious sites will eventually be blacklisted by search engines (e.g. Google) and anti-virus tools, preventing them from being viewed by most customers.

Cross-site scripting is a vulnerability of weak coding. XSS enables attackers to inject script into web pages viewed by other users (to modify the page’s appearance and/or behavior). A cross-site scripting vulnerability may be used by attackers to bypass access controls by gaining access to a visitor’s cookies or other personal data. XSS also allows a hacker to create a page content within an existing iframe. Cross-Site Scripting will usually lead to some type of phishing.

SiteLock’s network scan checks the thousands of ports on a server to make sure only the appropriate ones are open for your server type.

An Internet Protocol address (IP address) is a numerical label assigned to each device (e.g., computer, printer) participating in a computer network that uses the Internet Protocol for communication.

The act of providing a manual malware clean or vulnerability fix by our security engineers. ES will not repair any design damages done by a hacker.

A customers Control Panel is where they manage everything for their hosting account. Collecting these logins allows SiteLock to clean websites as well as configure the (WAF) Web Application Firewall as long as the DNS records are managed here as well. Most of our customers use either CPanel, Parallels Plesk or V Deck.

In the security industry this is as bad as it gets. When Google, Yahoo, Bing, etc. crawl a website for rankings but find malware they will blacklisted the site. This means that they will insert a header for the site when searched that says something along the lines of “WARNING: Visiting this site could harm your computer.” Would you visit that site? If the site is access directly there is usually a red screen that has a giant warning message like this one.