| Table of Contents |
|---|
...
This is where configuration of an SSL certificate occurs. You can access the screen by clicking:
| Panel |
|---|
Home → Configuration → (middle menu) Checkout → (toggle on "Advanced View") SSL Certificate (Custom) |
The screen will look similar to the screenshot below, if you are a trial user that has not yet placed their billing credit card details on file:
...
| Field | Notes | ||
|---|---|---|---|
| Secure Server Name | This is the custom SSL address. we recommend the prefix "secure" (secure.mydomain.com) because it conveys security to the customer.
| ||
| Company Name | It's important that the company name match the company as it appears in the whois record for the domain name. Failure to match up exactly can cause the purchase to be rejected by the certificate issuer. | ||
| Department Name | We default this to "E-Commerce" and we recommend leaving it as such. | ||
| Street Address | Must match the whois record for the domain name. | ||
| City | Must match the whois record for the domain name. | ||
| State | Must match the whois record for the domain name. | ||
| Postal Code | Must match the whois record for the domain name. | ||
| Country | Must match the whois record for the domain name. | ||
| We pre-populate this field with the email address on file for the UltraCart user making the purchase. The will become the point of contact for all followup email notifications involved in the purchase and configuration of the SSL. You may change this to any person within your organization that handles these technical issues. | |||
| Certificate Length | Choose the number of years:
Auto renewal is in affect. |
...
| Button Name | Description |
|---|---|
| Renew with 3rd party | This option allows you to go purchase the renewed SSL from a 3rd party. |
| Do Not Renew | Tells UltraCart not to renew the SSL |
| Re-key | Reissue the SSL to obtain newest certificate |
| Move | Move to another UltraCart Account. |
| Download | Download the Certificate |
| Delete | Delete the configured SSL from the account configuration. |
Advanced Setting
There is an checkbox setting "Use secure.ultracart.com by default" that when checked allows you to use the defaulted secure hostname secure.ultracart.com, so that you can use buy links that do not redirect to the configured SSL. If not checked, a buy link coded with the secure.ultracart.com hostname will auto redirect to the first issued SSL on the account.
If you have multiple SSL's that youwill be using with your items, you will assign the appropriate SSL to the buy link.
About SSL Validation Types
...
Important Note Regarding Cloudflare Configuration
| Info | ||
|---|---|---|
| ||
UltraCart does not support Cloudflare's DNS Proxy configuration. You'll need to turn that off.
|
About SSL Validation Types
| Note | |||||
|---|---|---|---|---|---|
UltraCart purchases the EssentialSSL from Comodo, which is by far the easiest to obtain and easier to manage renewals. EssentialSSL certificates are domain validated certificates which only require an Domain Control verification step.
If your e-commerce organization is new, go the EssentialSSL route. In future years you can upgrade to an organization validated certificate once your documentation, (phone number publications, etc.) are all established. Optionally, you can purchase one of the organization validated certificates from Comodo directly and import it as a 3rd Party Certificate. Organizational certificates take substantially longer to issue and require validation paperwork from your company along with a verification phone call made to the phone number you have listed on either yp.com or superpages.com. You will need to be able to provide paperwork (such as articles of incorporation, utility bills, etc.) that show an address that matches the address on your certificate request and DNS WHOIS record. If you have any type of domain privacy features active on your DNS WHOIS it will increase the issuance time and paperwork. For this option, see "3rd Party SSL Integration" below for how to purchase and configure your third party SSL. |
...
You'll obtain the CSR by clicking the "Download CSR" button. You will need to provide this document to the certificate authority that you are purchasing from. While purchasing the certificate you may be asked for a server type. Select Apache (Apache/Mod_ssl) for the server type.
| Info | ||
|---|---|---|
| ||
When copying and pasting the CSR from UltraCart, be sure to include the entire block of code including the header and footer sections (those are part of the CSR and it will not work if you strip the header and footer out. |
...
| Expand | ||
|---|---|---|
| ||
You will typically use the Registration Service Provider from which you purchased your domain name. Then, when viewing the whois record for your domain name, scroll down towards the bottom of the record details looking for "Registration Service Provider:" and you'll see the company company contact details. Then head over to that service's website and log into your account and navigate to the DNS configuration area. |
...