Certificats SSL IP

Quelles sont les exigences et restrictions sur les adresses IP dans les certificats SSL ?

First of all, an SSL certificate can be issued for a public IP address.Furthermore, these are the rules and requirements to get an IP SSL certificate:

• Your organization must own your IP address and CA will verify your IP ownership.
• Organization and individual are able to apply for SSL certificate for an IP address.
• Only DV and OV certificates can be utilized for an IP address.
• You are available to choose a single domain and multi-domain SSL certificates for IP address, but not to wildcard SSL certificate for it.
• You can compose an IP address in the Common Name (CN) or a Subject Alternative Name (SAN) field (if you have picked a multi-domain SSL).

Puis-je obtenir un SSL pour une IP privée ?

No. Since 2016, the CA/Browser Forum made SSL certificates for private IP/reserved IP and local server name with a non-public domain name suffix invalid and asked CAs to revoke any such SSL certificates. Because such reserved IP addresses and local server names (intranet) are not unique, they are easy to impersonate by attackers to commit man-in-the-middle attacks and get unauthorized access to the data. Hence, such private IPs cannot be permitted by a publicly trusted CAs. You can get a self-signed SSL certificate for private IPs and intranet addresses, though.

Comment choisir un certificat SSL pour une adresse IP ?

Domain Validation (DV) and Organization Validation (OV) certificates are able to encrypt a public IP address. And then, you shall confirm a single domain or multi-domain certificates (if you write one or more IP addresses in SAN field, please pick a multi-domain SSL).

As the leading provider of security solutions, NicSRS offers well-known certificate brands for IP address, such as Sectigo, PositiveSSL, GlobalSign, Digicert, Entrust, etc. Here are popular SSL certificates for public IP addresses, and we firmly believe that a suitable one for you!