What is Heartbleed? Heartbleed is a security concern for users of OpenSSL, a widely-used opensource cryptographic software library. The error allows anyone to read the memory of servers supposedly protected by SSL, and reveals the cryptographic keys that allow messages to be decoded, the credentials of users, and the content. Once the keys are compromised, attackers can look at any communications with impunity, completely undetected. However, it is important to note that this is a vulnerability Read more [...]

More than 3 years ago, Symantec Corporation officially acquired VeriSign’s authentication business unit, which included all of its SSL offerings. One of the final cogs in this transaction is to finalize the brand switch in the popular Norton Secure Seal, which comes with every Symantec SSL certificate. As of Spring 2014, what was previously “Norton Secured Powered by VeriSign” will officially and permanently become “Norton Secured Powered by Symantec.” As a Specialist Partner of Symantec, Read more [...]

Subject Alternative Name (SAN) lets you secure multiple host names under just one certificate. Subject Alternative Name extension has been part of X509 certificate standard since before the year 1999. But it became popular only recently after its application in Microsoft Exchange 2007 which use these certificates to simplify server configuration. Key Elements of SAN SSL Certificate: Certificates that use Subject Alternative Name SSL Certificates are strong ssl certificates to secure multiple Read more [...]

New Certificate/Browser (CA/B) Forum Industry Standard Set to Begin on January 1st, 2014 As per the new rule agreed upon at the Certificate/Browser (CA/B) forum, the governing body for the SSL industry, all active, issued security certificates must be signed with 2048-bit encryption beginning January 1st, 2014. This new standard was suggested by the National Institute of Standards and Technology (NIST) and is a pre-emptive response to the growing sophistication of hackers and super computers, Read more [...]

It’s now the best time to step up security because, well, it’s required now. The specific dates of these mandates for new certificates and renewals will vary depending on the brand and type of certificate. For some, there is nothing that needs to be done for those currently installed certificates, however, when those certificates expire users will need to renew by generating a Certificate Signing Request of at least 2048-bits. If you have a SSL Certificate that does not expire until after December Read more [...]