Skip to main content

Overview of SSL Certificate Products

An SSL certificate (Secure Sockets Layer Certificate) is a type of digital certificate issued by an authoritative, trusted Certificate Authority (CA) in compliance with the SSL/TLS protocol. It verifies the authenticity and legitimacy of a website or server. Using public-key encryption technology, it establishes an encrypted connection between the client and web server, ensuring the security and integrity of data transmission, and provides dual functions of identity verification and encrypted transmission.

How SSL Certificates Work​

SSL certificates are based on the SSL/TLS protocol, and can switch a site from HTTP (Hypertext Transfer Protocol) to HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer), which is the encrypted version of HTTP that performs secure data transmission based on the Secure Sockets Layer (SSL).

The Encryption Workflow of SSL Certificates​

1. Client initiates a request When a client (such as a browser) attempts to access a website using the SSL/TLS protocol (usually starting with https://), it sends a request to the server to establish a secure connection.

2. Server responds and sends the SSL certificate After receiving the client's request, the server sends its SSL certificate to the client. The SSL certificate contains the server's public key, information about the Certificate Authority (CA), the validity period of the certificate, and other details.

3. Client verifies the SSL certificate After receiving the SSL certificate, the client performs the following verifications:

  • Certificate validity: Check whether the certificate is within its validity period.
  • Certificate issuing authority: Verify whether the certificate is issued by a trusted CA.
  • Certificate domain name: Ensure the domain name in the certificate matches the domain name the user is visiting.
  • Certificate integrity: Verify whether the certificate has been tampered with through the CA's digital signature.

4. Generate a session key If the SSL certificate passes verification, the client generates a random symmetric Session Key, encrypts this session key with the server's public key, and then sends it to the server.

5. Server decrypts the session key The server uses its own private key to decrypt the encrypted session key sent by the client, and obtains the symmetric session key.

6. Establish encrypted communication The client and server now both hold the same symmetric session key, which they can use to encrypt and decrypt subsequent communication data. Symmetric encryption algorithms (such as AES) are usually used to encrypt actual data transmission, because symmetric encryption is more efficient than asymmetric encryption (such as RSA).

7. Secure data transmission All data transmitted between the client and server is encrypted using the symmetric session key, ensuring data confidentiality and integrity. Even if data is intercepted during transmission, attackers cannot decrypt and read the data.

Core Functions of SSL Certificates​

1. Encrypted data transmission Data is encrypted and decrypted using public and private keys, ensuring that only the target server can decrypt the data. For users' websites, Mini Programs, APPs, email service systems, etc., data transmitted between clients and servers is encrypted through encryption technologies (such as the TLS/SSL protocol), ensuring that sensitive information (such as login credentials, payment information, personal data, etc.) will not be stolen or tampered with during transmission.

2. Identity verification: SSL/TLS certificates are issued by authoritative Certificate Authorities (CAs), which can verify the real identity of a website, prevent users from visiting fake websites, and reduce the risk of phishing attacks.

3. Data integrity Ensure that data has not been tampered with or damaged during transmission. Through the use of hash algorithms and digital signatures, it is possible to detect whether data has been modified by a third party.

Target Users and Application Scenarios of SSL Certificates​

The core function of SSL certificates is to ensure the security of data transmission. For websites that do not use SSL certificates, transmitted data is directly exposed in the Internet environment, making it vulnerable to theft or tampering by third parties. In addition, when accessed through a browser, such sites will be marked as insecure, resulting in the loss of visitors and traffic. Most importantly, to meet compliance requirements, the Cybersecurity Law explicitly stipulates that communication transmissions must be encrypted.

Typical target users and application scenarios are as follows:

  • Website encryption: Applicable to all types of websites, especially e-commerce sites, banking platforms, social media platforms, government websites, schools, hospitals and more. It enables the HTTPS protocol for websites to encrypt communications between browsers and servers.
  • E-commerce and online payment: Used for e-commerce platforms (such as Amazon, eBay), payment gateways (such as PayPal, Stripe), gaming platforms and public service platforms to protect users' transaction data.
  • Mobile application communication: Used for mobile applications (such as banking apps, social media apps) to ensure that communications between mobile apps and servers are encrypted with SSL certificates.
  • Email encryption: Used for corporate email servers (such as Microsoft Exchange, Gmail) to encrypt email communications (protocols such as SMTP, IMAP and POP3).
Last updated on