Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Warning

You have tried to access an archived page. Please go to the new https://root360.atlassian.net/wiki/spaces/KB to find more documents.


...

For the use of encrypted connections (HTTPS) a valid SSL certificate for the desired domains is necessary.

In the table below you find a comparison of certificates supplied by AWS and the offers of third parties. AWS certificates are limited in their use: they must be used with an AWS load balancer or the AWS Cloudfront CDN. AWS also does not supply Extended Validation (EV) certificates. On the upside AWS certificates are free and can be renewed automatically. There is no additional fee from root360 for the setup of an AWS certificate.

Certificate type

Validity

Renewal

Price

Wildcard

Multi-domain

Extended Validation

Restrictions

Procurement through

Standard SSL Certificates from AWS

13 months

automatically

free

possible

possible

No

Only AWS Loadbalancer and CDN

root360

Standard SSL certificates

Selectable (eg 1 or 2 years)

manually

Depending on provider

possible

possible

No

flexible

customer

Extended Validation (EV) certificates

Selectable (eg 1 or 2 years)

manually

Depending on provider

possible

possible

Yes

flexible

customer

Root360 monitors all customer environments for certificate validity. We inform you as soon as the validity of any of your certificates is less than 30 days.

Table of Contents

AWS certificates

Root360 handles the creation of the certificates with AWS. For this we need a list of the domains for which the certificate should be valid.

...

We will send you these DNS records (of type CNAME) that AWS generated, one for each domain.

They look like this:

_8edc0c37fa0f0de703fd4dc99df3336e.example.de.      CNAME    _4ac89c69d1d4c28a337d9e135caaed39.acm-validations.aws.

...

List of validation email adresses:

  • administrator@your_domain

  • hostmaster@your_domain

  • postmaster@your_domain

  • webmaster@your_domain

  • admin@your_domain

The validation email contains a link that must be accessed to validate the certificate.

...

For some customers the initial setup of a certificate through email validation is less complicated. However, it creates work each time it needs to be renewed. That is why root360 recommends using DNS validation.


title
Note

Attention

AWS does not supply Extended Validation certificates. If you need this, feel free to contact us by mail (support@root360.de) or phone (+49 (0) 341 39 280 907-7).

...