Skip to main content
    My-SSL LogoMy-SSL
    Free Security Education

    SSL & Web Security Learning Center

    Expert guides and tutorials on SSL/TLS certificates, encryption, PKI, and digital security. Explore the bylines, dates and sources in each guide before applying it to your environment.

    199
    Guides published
    Oct 2, 2026
    Last guide updated
    Daniel Rehak
    Contributor articles
    Primary sources
    CA/B Forum, RFCs, vendor docs

    Browse by Topic

    Code Signing
    26 articles
    SSL Basics
    16 articles
    Guides & Tutorials
    61 articles
    Security
    55 articles
    Comparisons
    12 articles
    Installation
    25 articles
    SSL Configuration
    4 articles

    199 articles found

    Guides

    How to Sign a PowerShell Script (Step by Step)

    Sign a PowerShell script with Set-AuthenticodeSignature: pick the right certificate, force SHA256 (Windows PowerShell 5.1 still defaults to SHA-1), add a timestamp, verify with Get-AuthenticodeSignature, and fix HashMismatch, UnknownError, and the untrusted-publisher prompt.

    My-SSL TeamJul 3, 202612 min
    Guides

    How to Sign an EXE with SignTool (Step by Step)

    Sign a Windows EXE with SignTool: install it from the Windows SDK, run signtool sign with /fd SHA256 and an RFC 3161 timestamp, verify the result, and fix the errors most first attempts hit.

    My-SSL TeamJul 3, 202612 min
    Security

    What Is Mutual TLS (mTLS)? How Two-Way Certificate Authentication Works

    Mutual TLS (mTLS) has both the client and server present a certificate, so each proves its identity during the TLS handshake. Learn how the two-way handshake works, where client certificates come from, when to use mTLS, and how it differs from API keys.

    My-SSL TeamJul 2, 202613 min
    Installation

    How to Install an SSL Certificate on HAProxy (SSL Termination Guide)

    Install an SSL certificate on HAProxy and terminate TLS at the edge: build the combined PEM, configure the HTTPS bind line, force HTTPS, harden ciphers and HSTS, then re-encrypt to your backends.

    My-SSL TeamJul 1, 202615 min
    SSL Basics

    What Is a Private Key? SSL Private Keys Explained

    A private key is the secret half of your SSL certificate's key pair, generated with your CSR and never shared. Learn what it is, why the CA never sees it, where it lives, how to protect it, and what to do if you lose it.

    My-SSL TeamJun 30, 202613 min
    Security

    What Is TLS Termination? SSL Offloading and Re-Encryption Explained

    TLS termination (SSL offloading) decrypts HTTPS at a load balancer so backend servers don't have to. Learn how it works, the difference between termination, passthrough, and bridging, the plaintext-backend risk, and when to re-encrypt.

    My-SSL TeamJun 29, 202613 min
    Security

    Why Does My Website Say 'Not Secure'? Causes and Fixes

    The 'Not Secure' label means a page loads over HTTP without a valid SSL certificate. Learn what triggers the warning in Chrome, Firefox, and Safari, the five common causes, and the step-by-step fixes that remove it for every visitor.

    My-SSL TeamJun 28, 202613 min
    Comparisons

    Wildcard vs Multi-Domain SSL: Which Certificate Do You Need?

    Wildcard SSL secures unlimited subdomains of one domain; multi-domain (SAN) certificates cover many separate domains. Compare coverage, validation, cost, and the EV wildcard rule, then pick the right certificate for your topology.

    My-SSL TeamJun 27, 202613 min
    SSL Basics

    Symmetric vs Asymmetric Encryption: How TLS Uses Both

    Symmetric encryption uses a single shared key; asymmetric encryption uses a public/private key pair. Learn how each works, their trade-offs in speed and key distribution, and why TLS combines both to secure every HTTPS connection.

    My-SSL TeamJun 25, 202613 min
    SSL Basics

    What Is a Certificate Authority (CA)? How SSL Trust Works

    A certificate authority (CA) is the trusted third party that issues SSL certificates and vouches for who controls a domain. Learn how CAs verify identity, sign certificates, earn browser trust through root programs, and can be distrusted when they break the rules.

    My-SSL TeamJun 17, 202614 min
    Security

    TLS Cipher Suites Explained: How to Read Them and Choose the Right Ones

    A cipher suite is the bundle of algorithms that secures a TLS connection. Learn to read a suite name like TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, why forward secrecy is the part that matters most, how TLS 1.3 cut the list to five AEAD suites, and which weak suites to disable.

    My-SSL TeamJun 16, 202614 min
    Security

    What Is SNI? Server Name Indication, ESNI, and Encrypted Client Hello

    Server Name Indication (SNI) lets one IP host many HTTPS sites, each with its own certificate, by naming the hostname in the TLS handshake — in plaintext. Learn how SNI works, how it differs from multi-domain certificates, and how Encrypted Client Hello (ECH) finally encrypts it.

    My-SSL TeamJun 15, 202613 min

    All guides by topic

    Every guide in the Learning Hub, grouped by subject. 199 articles covering SSL/TLS certificates, code signing, S/MIME, PKI and server configuration.

    Code Signing

    26 guides

    SSL Basics

    16 guides

    Guides

    61 guides

    Security

    55 guides

    Installation

    25 guides

    How these guides are written and reviewed

    Guides are written by Daniel Rehak and other contributors. Check each guide’s sources and date against the current issuer or platform documentation. My-SSL also sells certificates; product recommendations have a commercial relationship to this site. Send corrections with the page URL and supporting source.

    Where a rule has a future effective date, the guide states what applies today and marks the future change separately. The most recently updated guide in this library was updated on Oct 2, 2026.

    Named authors
    Primary-source references
    Publication and update dates