Guides & Tutorials
Step-by-step guides for SSL certificate management and implementation
62 articles in this category
SignTool Errors: What Each One Means and How to Fix It
SignTool never touches your private key. It asks a cryptographic provider to do the signing, and since publicly trusted code signing keys were pushed into hardware in June 2023, that provider layer is where the failures live. What the hex code after SignerSign() failed actually identifies, the four buckets every failure sorts into, why a timestamp error never needs a re-sign, and a reference table for the HRESULTs you will actually see.
How to Set Up S/MIME in Apple Mail (macOS and iPhone)
One certificate, two completely different installers: macOS imports the PKCS#12 into Keychain Access, while iPhone takes the same file as a configuration profile behind your device passcode. The exact steps for each, where iOS 18 moved the settings, and why a correctly installed certificate still refuses to encrypt.
How to Set Up S/MIME in Google Workspace (Gmail)
Google splits this across four help pages, so people stall at whichever gate doesn't apply to them. Which editions actually include hosted S/MIME, why Business Plus isn't one of them, the root certificate rule most internal CAs fail, and the only way to deploy past a handful of mailboxes.
Java Keytool Commands Cheat Sheet: Keystore, CSR, Import and Trust
Two details break more Java certificate installs than everything else: the SAN extension does not carry over into the CSR, and importing the CA's reply under a new alias returns success while storing something no server can use. Verified against OpenJDK 21.
Using a Commercial CA With cert-manager in Kubernetes
cert-manager is not a Let's Encrypt client. What External Account Binding actually does, which validation levels a paid ACME endpoint can issue on its own, and what to do with the OV certificate that arrives as an email attachment instead.
Cloudflare SSL Modes Explained: Flexible, Full, and Full (Strict)
The padlock a visitor sees only covers the hop to Cloudflare. What Off, Flexible, Full and Full (Strict) do to the second hop, why Flexible plus an origin redirect rule is a closed loop, and why Automatic SSL/TLS may have already moved your zone without asking.
How to Digitally Sign a Word Document with a Certificate
The clicking takes forty seconds; the certificate decides whether the signature means anything. Why Word checks the operating system's trusted authorities while Acrobat checks Adobe's own list, what a recoverable signature error is really telling you, and the timestamp that keeps a contract verifiable after the certificate expires.
SSL Certificate for an IP Address: What You Can and Cannot Get
A public CA can certify a routable IP address at DV or OV level, never a private one and never at EV. Which addresses qualify, how control of an address is proven now that the manual methods are being retired, and why the free option lasts 160 hours.
SSL Certificate for a Mail Server: Which Name, Which Type
The certificate has to match the hostname clients connect to and the host your MX record points at, never the domain after the @. Which names to request, why an S/MIME certificate cannot do this job, and what MTA-STS turns a name mismatch into.
How to Digitally Sign a PDF with a Certificate (Step by Step)
The Acrobat steps take a minute; the certificate decides whether anyone else can validate the result. Why a digital ID you make yourself always reads as unknown, which trust lists Acrobat checks on its own, and the timestamp setting that keeps a signature working after the certificate expires.
How to Sign a ClickOnce Application (Step by Step)
Signing a ClickOnce app means signing its two manifests with mage, not the EXE. The three-command order, how to reach a key on a hardware token, timestamping, and the certificate-renewal trap that forces every user to reinstall — now that 460-day certificates make renewals annual.
Multi-Domain SSL Certificate Price: What It Costs in 2026
DV multi-domain (SAN) SSL runs about $18–$100/year, OV about $70–$300, EV about $75–$400 in 2026. How the base-plus-per-SAN price works, why an EV multi-domain exists when an EV wildcard doesn't, and multi-domain vs wildcard cost.