Global CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt certutil -A -n "GeoTrust SSL CA" -t "C,," -d Global CA" -t "C,," -d ~/.certs -i ~/.certs/163.crt certutil -A -n "GeoTrust SSL CA" -t "C,," -d Inc., CN = GeoTrust Global CA verify return:1 depth=1 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA" -t "C,," -d ~/.certs -i ~/.certs/163.crt [root@mimvp-hz ~]# certutil -A -n "GeoTrust SSL CA - G3,O=GeoTrust Inc.
而在众多的SSL证书品牌中,GeoTrust、DigiCert、iTrustSSL是备受推崇的品牌,所提供的OV通配符证书不仅兼容性好,而且安全性高,特别适合中大型企业使用。 GeoTrust提供的OV企业通配符SSL证书,能够同时保护多个子域名,满足了企业在进行网站拓展时的安全需求。GeoTrust的OV证书通过组织验证,确保了证书背后企业的合法性,增强了网站的可信度。 GeoTrust的SSL证书具有较高的兼容性,支持所有主流浏览器,并且其加密技术符合现代标准,能够为网站提供强大的数据保护。 GeoTrust 企业型通配符SSL证书:7840元/年DigiCertDigiCert属于高端品牌,其OV企业通配符SSL证书被广泛应用于各类中大型企业中,尤其适用于需要高安全性和大规模子域名保护的企业
smtp.qq.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/qq.crt certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs certutil -L -d /root/.certs 为了防止出现前文所说的发送邮件警告提示,还需要进入邮箱SSL证书存放目录/root/.certs里执行如下命令: certutil -A -n "GeoTrust
ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > exmail_qq.crt [root@localhost ~]# certutil -A -n "GeoTrust SSL CA" -t "C,," -d /data/mail/certs/ -i exmail_qq.crt [root@localhost ~]# certutil -A -n "GeoTrust Global CA" -t "C,," -d /data/mail/certs/ -i exmail_qq.crt [root@localhost ~]# certutil -A -n "GeoTrust
CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/qq.crt # 添加证书到数据库 [root@localhost ~]# certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt [root@localhost ~]# certutil -A -n "GeoTrust Global issuer is not recognized.”这样的证书没有获得认可的警告提示,需要执行下面指明受信任证书、防报错的命令 [root@localhost ~]# certutil -A -n "GeoTrust
465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /root/.certs/163.crt # certutil -A -n "GeoTrust SSL CA" -t "C,," -d /root/.certs -i /root/.certs/163.crt # certutil -A -n "GeoTrust Global CA" -t "C,," -d /root/.certs -i /root/.certs/163.crt # certutil -A -n "GeoTrust SSL CA - G3" -t "Pu,Pu,Pu" Trust Attributes SSL,S/MIME,JAR/XPI GeoTrust
smtp.qq.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/qq.crt certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt certutil -L -d /root/.certs cd /root/.certs/ certutil -A -n "GeoTrust SSL CA - G3
入有这个警告的话本身对签名没有影响,但是总感觉怪怪的,要想去掉这个警告只要在命令上再加上 -tsa https://timestamp.geotrust.com/tsa 就可以了 最终命令是: jarsigner -digestalg SHA1 -sigalg MD5withRSA -tsa https://timestamp.geotrust.com/tsa -keystore test.keystore - timestamp.verisign.com/scripts/timstamp.dll Comodo 时间戳URL: http://timestamp.comodoca.com/authenticode GeoTrust
465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /etc/pki/nssdb/139.crt $ certutil -A -n "GeoTrust SSL CA" -t "C,," -d /etc/pki/nssdb/ -i /etc/pki/nssdb/139.crt $ certutil -A -n "GeoTrust Global CA"
企业增强型EVSSL 品牌详情 Comodo 单域名版 168 1680 2680 多域名版 980 2680 3680 通配符版 1280 3680 无 多域名通配版 3880 6680 无 GeoTrust 元起 ★★★★★ Comodo 280元起 1280元起 ★★★★ Entrust OVSSL 2800元起 OVSSL 8800元起 ★★★★ Geotrust 除此之外,Symantec 旗下还有 Geotrust,Thawte、Rapid 等品牌的证书,在中国也都拥有一席之地,都属于价格较为低廉的SSL证书,环度网信均可提供。 1-3工作日 3-5工作日 GoDaddy 0-60分钟 3-5工作日 5-7工作日 Symantec 无 3-5工作日 5-7工作日 Geotrust
connect smtp.yeah.net:465 |sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >yeah.crt certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/yeah.crt certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/ .certs -i ~/.certs/yeah.crt certutil -A -n "GeoTrust SSL CA - G3" -t "Pu,Pu,Pu" -d ~/.certs/./ -i yeah.crt
ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/guoxiangfu.crt /usr/bin/certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/guoxiangfu.crt /usr/bin/certutil -A -n "GeoTrust Global CA " -t "C,," -d ~/.certs -i ~/.certs/guoxiangfu.crt cd /root/.certs/ /usr/bin/certutil -A -n "GeoTrust
.126.com:465 | sed -ne ‘/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p‘ > ~/.certs/qq.crt certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs 我这里在发送邮件的时候会提示一个证书不信任的问题,因为不影响正常发送邮件,所以选择忽略; 证书不信任的问题,需要进入存放证书的目录,执行 cd /root/.certs certutil -A -n "GeoTrust
smtp.mxhichina.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/ali.crt $ certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/ali.crt $ certutil -A -n "GeoTrust Global CA" -t "C,," -d rw------- 1 root root 16384 4月 19 10:48 secmod.db # 验证,显示如下信息表示 SSL 证书配置生成及安装完成 $ certutil -A -n "GeoTrust
smtp.exmail.qq.com:465| sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'>~/.certs/qq.crt certutil -A -n "GeoTrust SSL CA"-t "C,,"-d ~/.certs -i ~/.certs/qq.crt certutil -A -n "GeoTrust Global CA"-t "C,,"-d ~/.certs
OVSSL 1800元起 OVSSL 5800元起 ★★★★★ Comodo 280元起 1280元起 ★★★★ Entrust OVSSL 2800元起 OVSSL 8800元起 ★★★★ Geotrust 除此之外,Symantec 旗下还有 Geotrust,Thawte、Rapid 等品牌的证书,在中国也都拥有一席之地,都属于价格较为低廉的SSL证书,环度网信均可提供。 工作日 5-7工作日 Entrust.net 无 1-3工作日 3-5工作日 GoDaddy 0-60分钟 3-5工作日 5-7工作日 Symantec 无 3-5工作日 5-7工作日 Geotrust
由于谷歌Chrome将停止信任赛门铁克SSL证书及其旗下CA品牌(Thawte、VeriSign、Equifax、GeoTrust和 RapidSSL)。 微信支付HTTPS服务器所使用的GeoTrust 品牌证书根CA,将在Chrome新版浏览器中不受信任,必须更换其他根CA签发的新证书。
安信SSL证书可提供Symantec、Geotrust、Comodo、Thawte以及RapidSSL等多家全球权威CA机构的SSL数字证书。 不同的SSL证书品牌价格不一样,便宜的有Comodo、RapidSSL的证书,一般几百元就可以申请一个,高端的产品有Symantec、Geotrust等SSL证书,一般在百元至万元之间。
smtp.qq.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/qq.crt certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs
Z~.png (6)兼容主流浏览器和设备 安信SSL证书的Symantec、Geotrust、Comodo、Thawte以及RapidSSL等多家全球权威CA机构的SSL数字证书,浏览器的兼容性达到 证书无非考虑三个层面:品牌、验证方式、域名数量 (1)SSL证书品牌的考虑:全球的SSL证书提供商非常的多,可提供国际认证的SSL证书颁发机构却不多,国际知名可靠的SSL证书品牌有:Symantec、Geotrust