Zoho Sites SSL Configuration and Installation Guide

A Certificate Signing Request (CSR) is a vital element in creating secure links between clients and servers on the internet, especially within the SSL (Secure Sockets Layer) framework. Essentially, it's a cryptographic message produced by a client, usually a web browser, containing key details such as the server's public key and organizational information. This message is then sent to a Certificate Authority for validation, which confirms
the server's identity.

Navigate to SSLTrust's CSR Generator and generate your CSR and Private Key.

Note:- Save the generated Private Key and CSR on your device. This might come in handy if you want to re-do the configuration.

The next step in the installation process is to order an SSL Certificate. If you visit our SSL Certificates List page, you will options available, such as a low-cost domain-validated SSL or a multi-domain SSL.

You can choose the SSL Selector on our website. If you're still unsure of what certificate to choose for your business, please contact our Sales Team and they will be glad to help you out.

1: Add the SSL Certificate your cart and complete the checkout process.

Provide your account information

Pick the payment option you prefer, then click on the checkout button

2: Following your SSL Certificate purchase, you're ready to commence configuring it. To complete this action, navigate to your SSLTrust account and handle your latest purchase. Access the SSLTrust Dashboard, then navigate to Services and opt for My Services

Your purchased certificate and order status should be visible to you. Next, click on Manage.

Upon clicking Manage, you'll find yourself on the Product Details page of your SSL Certificate. Choose "start configuration" to personally configure the settings, or alternatively, share the URL below with the relevant person for them to handle the configuration on your behalf.

3: Ensure that the CSR (Certificate Signing Request) previously generated is copied and pasted here in the following format.

Then, click on Verify CSR.
If the CSR details align with the inputs you've previously provided, you can proceed; otherwise, generate a new CSR with accurate details.

Select the Server Type and click on Next Step.

4: Kindly fill out your contact details.

Please provide the details of your technical contact, if they are managing the certificate for you.
Authorization will be provided to them for managing the certificate, and renewal reminders will be sent.

In order to acquire a business SSL certificate, it is necessary to furnish your business information, which includes your accurate address, phone number, and legal entity name. Verification of the accuracy of this information will be conducted by the Certificate Authority.
Errors could potentially result in delays in the process.

Then, click on Next Step

5: The next step in this process is Domain Control Validation (DCV).
DCV, or Domain Control Validation, holds significant importance in the issuance process of SSL certificates. It confirms that the entity seeking the certificate maintains control over the particular domain, employing techniques such as email validation, file uploads, or DNS adjustments.

Verifying SSL certificates' legitimacy through this process is essential for bolstering online security.

Pick the method that suits you best. Having an email address with the domain name will be the quickest way to proceed. You'll receive an email containing a validation link. Clicking on the link should confirm your domain name.
Using the HTTP/HTTPS File Validation Method, create a folder in the designated directory, paste the contents, and your domain will undergo validation.

CNAME Validation represents the final method for validating your domain name.Essentially, you need to create a CNAME record in your DNS Settings to validate your domain name. Afterward, click on the "Check DNS Record" button to confirm DNS changes.

Following a brief interval, typically ranging from a few minutes to several hours, contingent upon your DNS propagation speed, the CNAME record should be validated.

If everything is set up correctly, click the button below to proceed to the validation manager.

6: After successfully completing all the previous steps, your certificate should now be issued.

Should the certificate not be issued, click on Domain Control Validation, and resubmit your chosen validation method. After successfully validating your domain with the chosen method, your SSL certificate will be issued. For customers who have ordered a Business SSL, it's important to wait for the Certificate Authority to validate your business address and phone number. If the validation process isn't finalized or if you haven't received your certificate after a specific time frame, please reach out to the support team for assistance regarding your certificate's status.

After your SSL certificate is issued, you'll receive an email containing the certificate directly from the Certificate Authority. Alternatively, you have the option to download the certificate from the SSLTrust Portal, which provides it in an easy-to-use format.

Return to the SSLTrust Dashboard and access your certificate by clicking on it.

1: Click on Collect/Download Certificate-

Go to the first column and click on copy to clipboard

2: Login to your account on Zoho Sites. Click on Manage Domains

3: Click on SSL Hosting on the top menu and then select "Install Your Own SSL".

4: Paste in your copied main certificate in the CRT Dialog Box followed by the Private Key

5: Head back to the certificate collection page and click on copy to clipboard on the Intermediate certificate.

6: Proceed to paste your Intermediate/Chain Certificate and click on Ok

Now, navigate to https:// yourdomain.com to view your secure website.

SSLTrust's Free SSL Checkeris a tool that allows you to test and validate the SSL/TLS certificates installed on websites. Simply enter a domain name and it will analyze the certificate, providing details like the issuer, expiration date, encryption strength, and whether the certificate is properly configured and trusted by major browsers and operating systems. In SSL tests, receiving an "A" rating typically signifies that the SSL certificate and its configuration meet high security standards.

The checker highlights any potential security issues or misconfigurations with the SSL implementation. This free tool makes it easy to verify if a website's SSL certificate is valid and secure, giving visitors confidence their connection is encrypted and their data is protected from eavesdroppers.

Additionally, you can also performed a detailed check which generates an actionable report with all the ins and out of your SSL Certificate. This includes Protocols, Ciphers, Vulnerabilities and much more.

You might require assistance from your web developer or make the necessary updates to your website personally to ensure that all files utilize "https://" and all links leading to and within your website employ "https://".