{"id":590,"date":"2019-08-22T18:17:45","date_gmt":"2019-08-22T18:17:45","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/p\/?p=590"},"modified":"2021-07-23T11:04:03","modified_gmt":"2021-07-23T11:04:03","slug":"what-is-a-self-signed-ssl-certificate-and-why-is-it-risky","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/","title":{"rendered":"What is a Self Signed SSL Certificate and Why Is It Risky?"},"content":{"rendered":"

An SSL certificate<\/a> is a critical component of website security, facilitating encrypted connections that protect sensitive data in transit. But \u2014 and this is a big \u201cbut\u201d \u2014 the SSL certificates have to be issued by a trusted entity called a certificate authority<\/a> (CA) for them to be trusted by clients (your users\u2019 web browsers). So, if you\u2019re here because you asked your search engine \u201cwhat is a self signed certificate,\u201d allow us to explain what this all means for you and why it\u2019s better to use a CA signed SSL certificate over a self-signed one.<\/p>\n

<\/p>\n

The reason for such a cautious approach comes from the authentication provided by SSL\/TLS certificates. An SSL certificate authenticates the identity of a website or organization. Now, keep in mind that web users aren\u2019t the ones that are actually interacting with SSL certificates. Their browsers are \u2014 and browsers have a vested interest in keeping their users safe.<\/p>\n

So, it makes sense that the browsers need some assurances before they\u2019re willing to trust a certificate and, by extension, the entity it authenticates. That\u2019s what validation is for. When a certificate validates an entity, it\u2019s running a series of checks that the browsers require to trust the certificate. The more information that\u2019s included in the certificate, the more checks that need to be performed.<\/p>\n

Once the CA performs those checks, they sign the certificate, which lets the browser know that it can be trusted.<\/p>\n

Let\u2019s Talk About Why You Can\u2019t Sign Your Own Certificate<\/h2>\n

A self-signed certificate<\/a> is something that just about any server can create, but they won\u2019t be trusted by web users\u2019 internet browsers because they weren\u2019t properly validated and issued by a CA. You can\u2019t validate yourself. It should be obvious why \u2014 after all, you could simply issue a certificate for any website you want and there would be no way for the browser to figure out whether it\u2019s fake or not. You\u2019ll receive an error message like this if you try to use a self-signed SSL certificate on a public website:<\/p>\n

\"Graphic:<\/p>\n

So, to avoid this issue, browsers don\u2019t trust self-signed certificates. That\u2019s categorical. For an SSL certificate on the public internet to be trusted, it needs to be signed by a trusted certificate authority. Period.<\/p>\n

\n

Purchase a Wildcard SSL Certificate & Save Up to 73%!<\/h2>\n

We offer the best discount on all types of wildcard SSL Certificates with DV and OV validation. We offer wildcard certificates from the leading CAs, including Comodo CA, Sectigo, Thawte, GeoTrust, and RapidSSL starting for as little as $52.95 per year.<\/p>\n

Shop Cheap Wildcard SSL Certificates<\/a><\/p>\n<\/div>\n

So, Why Are Self-Signed Certificates a Thing?<\/h2>\n

For the same reason ear gauges and tongue rings are a thing \u2014 some servers like to express themselves. No, but seriously, self-signed certificates are a fine option for test environments and internal networks. With just a little configuration, the root that was used to self-sign the certificates can be extended trust by the network itself and anyone on it will then be able to use the self-signed certificates as if they were trusted.<\/p>\n

This practice just doesn\u2019t work on the public internet because that root isn\u2019t trusted anywhere else.<\/p>\n

So, if you\u2019re securing a public website, don\u2019t use a self-signed certificate. If you do, your visitors\u2019 web browsers are going to issue error messages saying your website is \u201cnot secure\u201d and may not be trustworthy.<\/p>\n

Obviously, that\u2019s bad for business. So, bottom line: use a trusted CA to issue all of your SSL certificates.<\/p>\n

\n

Purchase a DV SSL Certificate & Save Up to 88%!<\/h2>\n

We offer the best discount on all types of Domain Validation SSL Certificates (DV SSL). We offer certificates from the leading CAs, including Comodo CA, Sectigo, Thawte, GeoTrust, and RapidSSL with DV certificates starting as low as $5.45 per year.<\/p>\n

Shop DV SSL Certificates<\/a><\/p>\n<\/div>\n

What Is A Certificate Authority (CA)?<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

An SSL certificate is a critical component of website security, facilitating encrypted connections that protect sensitive data in transit. But \u2014 and this is a big \u201cbut\u201d \u2014 the SSL certificates have to be issued by a trusted entity called … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[48,43],"class_list":["post-590","post","type-post","status-publish","format-standard","hentry","category-ssl-advanced","tag-self-signed-ssl","tag-ssl-certificates"],"yoast_head":"\nWhat is a Self Signed SSL Certificate and Why Is It Risky?<\/title>\n<meta name=\"description\" content=\"Not sure what is a self signed certificate? We'll break down what a self signed SSL cert is, how it works, and why you should avoid it on public sites.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is a Self Signed SSL Certificate and Why Is It Risky?\" \/>\n<meta property=\"og:description\" content=\"Not sure what is a self signed certificate? We'll break down what a self signed SSL cert is, how it works, and why you should avoid it on public sites.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/\" \/>\n<meta property=\"og:site_name\" content=\"Cheap SSL Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/CheapSSLSecurities\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-22T18:17:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-23T11:04:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2019\/08\/self-signed-certificate-warning.png\" \/>\n<meta name=\"author\" content=\"casey.crane\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"casey.crane\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/\"},\"author\":{\"name\":\"casey.crane\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/d9c1744bb0931c1942814061a5aca108\"},\"headline\":\"What is a Self Signed SSL Certificate and Why Is It Risky?\",\"datePublished\":\"2019-08-22T18:17:45+00:00\",\"dateModified\":\"2021-07-23T11:04:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/\"},\"wordCount\":668,\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/self-signed-certificate-warning.png\",\"keywords\":[\"self signed SSL\",\"ssl certificates\"],\"articleSection\":[\"SSL Advanced\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/\",\"name\":\"What is a Self Signed SSL Certificate and Why Is It Risky?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/self-signed-certificate-warning.png\",\"datePublished\":\"2019-08-22T18:17:45+00:00\",\"dateModified\":\"2021-07-23T11:04:03+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/d9c1744bb0931c1942814061a5aca108\"},\"description\":\"Not sure what is a self signed certificate? We'll break down what a self signed SSL cert is, how it works, and why you should avoid it on public sites.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/self-signed-certificate-warning.png\",\"contentUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/self-signed-certificate-warning.png\",\"width\":688,\"height\":458,\"caption\":\"Graphic: What is a self signed certificate warning message\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"SSL Help\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSL Advanced\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ssl-advanced\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"What is a Self Signed SSL Certificate and Why Is It Risky?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#website\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/\",\"name\":\"Cheap SSL Security\",\"description\":\"Shop for SSL Certificates at Cheap Prices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/d9c1744bb0931c1942814061a5aca108\",\"name\":\"casey.crane\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g\",\"caption\":\"casey.crane\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is a Self Signed SSL Certificate and Why Is It Risky?","description":"Not sure what is a self signed certificate? We'll break down what a self signed SSL cert is, how it works, and why you should avoid it on public sites.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/","og_locale":"en_US","og_type":"article","og_title":"What is a Self Signed SSL Certificate and Why Is It Risky?","og_description":"Not sure what is a self signed certificate? We'll break down what a self signed SSL cert is, how it works, and why you should avoid it on public sites.","og_url":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/","og_site_name":"Cheap SSL Security","article_publisher":"https:\/\/www.facebook.com\/CheapSSLSecurities","article_published_time":"2019-08-22T18:17:45+00:00","article_modified_time":"2021-07-23T11:04:03+00:00","og_image":[{"url":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2019\/08\/self-signed-certificate-warning.png","type":"","width":"","height":""}],"author":"casey.crane","twitter_card":"summary_large_image","twitter_creator":"@sslsecurity","twitter_site":"@sslsecurity","twitter_misc":{"Written by":"casey.crane","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/#article","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/"},"author":{"name":"casey.crane","@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/d9c1744bb0931c1942814061a5aca108"},"headline":"What is a Self Signed SSL Certificate and Why Is It Risky?","datePublished":"2019-08-22T18:17:45+00:00","dateModified":"2021-07-23T11:04:03+00:00","mainEntityOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/"},"wordCount":668,"image":{"@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2019\/08\/self-signed-certificate-warning.png","keywords":["self signed SSL","ssl certificates"],"articleSection":["SSL Advanced"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/","url":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/","name":"What is a Self Signed SSL Certificate and Why Is It Risky?","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/p\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/#primaryimage"},"image":{"@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2019\/08\/self-signed-certificate-warning.png","datePublished":"2019-08-22T18:17:45+00:00","dateModified":"2021-07-23T11:04:03+00:00","author":{"@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/d9c1744bb0931c1942814061a5aca108"},"description":"Not sure what is a self signed certificate? We'll break down what a self signed SSL cert is, how it works, and why you should avoid it on public sites.","breadcrumb":{"@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/#primaryimage","url":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2019\/08\/self-signed-certificate-warning.png","contentUrl":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2019\/08\/self-signed-certificate-warning.png","width":688,"height":458,"caption":"Graphic: What is a self signed certificate warning message"},{"@type":"BreadcrumbList","@id":"https:\/\/cheapsslsecurity.com\/p\/what-is-a-self-signed-ssl-certificate-and-why-is-it-risky\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"SSL Help","item":"https:\/\/cheapsslsecurity.com\/p\/"},{"@type":"ListItem","position":2,"name":"SSL Advanced","item":"https:\/\/cheapsslsecurity.com\/p\/ssl-advanced\/"},{"@type":"ListItem","position":3,"name":"What is a Self Signed SSL Certificate and Why Is It Risky?"}]},{"@type":"WebSite","@id":"https:\/\/cheapsslsecurity.com\/p\/#website","url":"https:\/\/cheapsslsecurity.com\/p\/","name":"Cheap SSL Security","description":"Shop for SSL Certificates at Cheap Prices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cheapsslsecurity.com\/p\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/d9c1744bb0931c1942814061a5aca108","name":"casey.crane","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c18d819d34a1995e91a4aa7518e9048df7856f336a1ede2262a572db7b1c2506?s=96&d=mm&r=g","caption":"casey.crane"}}]}},"_links":{"self":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts\/590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/comments?post=590"}],"version-history":[{"count":0,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts\/590\/revisions"}],"wp:attachment":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/media?parent=590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/categories?post=590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/tags?post=590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}