SSL / HTTPS FAQ

Link: https://support.brilliantdirectories.com/support/solutions/articles/5000665570

Why would I want to secure my site with SSL / HTTPS?


There are many benefits to securing the website with an SSL Certificate / HTTPS:

  • All payment pages can use their own domain name, rather than the default secured "securemypayment.com" domain name that processes payments by default
  • Increased confidence from the site's member's and visitors
  • Potentially higher rankings from Google and other search engines (more information about Google's use of HTTPS as a ranking signal here)
  • Overall increased security for all non-billing information submitted on the site (all billing information is already secured by SSL / HTTPS by default for all sites)
  • The Admin area of the site is automatically secured with HTTPS


If the admin would like the site to receive all of the benefits above, we offer an SSL Security Add-On. 



What do I get when I order the SSL / HTTPS Add-On?


When purchasing this service, the admin will receive the following:

  • One-click configuration and Installation of the SSL certificate on the website
  • An update to the entire website to enable the use HTTPS for all pages, including the Member Dashboard and Admin area
  • If the site has the SSL add-on enabled, the system will automatically proceed with SSL installation after a domain name change without prompting the user, ensuring the website has a secure connection
  • Setup of the billing pages of the site to use their own domain instead of SecureMyPayment.com
  • An update to the server files to redirect all old HTTP pages to the new HTTPS pages

 

Current pricing is on the SSL Security Add-On page, and the add-on keeps the certificate renewed automatically for as long as it is active. If the admin installs their own 3rd party SSL Certificate instead, there is no charge from us (see the FAQ below).



How to order the SSL / HTTPS installation service for the site


Order the SSL Security Add-On here: https://www.brilliantdirectories.com/ssl-secure-website



FAQ


I already purchased an SSL Certificate from another provider, can I use this one instead?


Yes!  The admin can install their own certificate through cPanel (Admin area >> Developers >> cPanel Dashboard).  Once the admin has successfully installed their own certificate, simply submit a ticket requesting that we enable all of the settings for their site to route traffic to HTTPS.



If I provide my own SSL Certificate, does this change the cost in any way?


There is no charge if the admin purchase and install their 3rd party SSL Certificate on their own.  Please note that we cannot provide support for the self-installation of 3rd party SSL Certificates, but our Support Team is able to assist with any issues encountered with the SSL Security Add-On purchased directly through Brilliant Directories.



Can the site use HTTPS without the SSL Security Add-On?


Yes. There are three ways to secure the site:

  • A 3rd party SSL Certificate, including a free certificate from a public certificate authority. The admin obtains it, installs it through cPanel and renews it before it expires, then submits a ticket so we can enable HTTPS on the site. There is no charge from us. Steps: Install 3rd Party SSL.
  • Cloudflare, which provides SSL once the domain uses Cloudflare's name servers. See Connecting a Site to Cloudflare.
  • The SSL Security Add-On, where we install the certificate and renew it automatically for as long as the add-on is active.



The domain has CAA records. Does anything need to change for the SSL certificate to install?


A CAA record is an optional DNS record that lists which certificate authorities are allowed to issue SSL certificates for a domain. Most domains have none, and nothing needs to be done. If the domain has any CAA records, one of them must allow sectigo.com, the certificate authority behind the certificates installed by the SSL Security Add-On. Without it, the certificate cannot be issued and the site stays on HTTP.


To fix this, add one more CAA record at the domain's DNS host, alongside the existing CAA records. Do not delete the existing ones:


Type: CAA
Name: @ (the root domain)
Flag: 0
Tag: issue
Value: sectigo.com


Once the record is saved, the certificate is issued automatically during the next nightly certificate check.



Can I use Brilliant Directories Credits for this service?


Yes, credits may be used to purchase this or any full-priced Add-On.