Resource providing a good overview of SSL certificates

I am looking for a good resource that explains the workings of SSL certificate chains and provides the latest security recommendations. This follows a reissue of a SHA-1 certificate (to SHA-2) that caused an issue - although our 'broken chain' allowed https connections to a website order export scripts failed.

In particular I would like to know how certificate chains are used,  how intermediate certificates and bundles come into play (and should be  selected at time of cert reissue) and the difference between G4/G5 certs etc.

If anyone can point me to a good overview that would be great.
LVL 1
agradminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

btanExec ConsultantCommented:
I do suggest reviewing the ssllab best practices for deploying SSL and most compliance checkers or reference guidance has used the online services (web server/client browser)  to have a review of the security posture of the SSL for the websites. https://www.ssllabs.com/projects/best-practices/

The benchmark used e.g.SSL Server Rating Guide and SSL threat model (sum up of risk and exposure in mindmap format) - see in https://www.ssllabs.com/projects/index.html

But for a really "overview" for a summary for covering all under SSL, this link has been useful
http://www.zytrax.com/tech/survival/ssl.html#ssl
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
agradminAuthor Commented:
Thanks Btan!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SSL / HTTPS

From novice to tech pro — start learning today.