Comodo ECC SSL 证书申请

  用了一段的时间的 Comodo RSA SSL证书，马上过期，换了一个新的ssl证书 Comodo PositiveSSL 证书现在已经支持了ECC。感谢imlonghao的博文提醒。 证书csr创建略有不同。大家可以参考，需要使用openssl生成，在线的csr生成器不能用。 root@vultr:~# openssl ecparam -genkey -name secp384r1 -out www.crazycen.com-ecc.keyroot@vultr:~# openssl req -new -sha384 -key www.crazycen.com-ecc.key -out www.crazycen.com-ecc.csr

You are about to be asked to enter information that will be incorporatedinto your certificate request.What you are about to enter is what is called a Distinguished Name or a DN.There are quite a few fields but you can leave some blankFor some fields there will be a default value,If you enter '.', the field will be left blank.-----Country Name (2 letter code) [AU]:CNState or Province Name (full name) [Some-State]:ShanghaiLocality Name (eg, city) []:ShanghaiOrganization Name (eg, company) [Internet Widgits Pty Ltd]:Crazycen BlogOrganizational Unit Name (eg, section) []:Crazycen BlogCommon Name (e.g. server FQDN or YOUR name) []:www.crazycen.comEmail Address []:cenxuebo@outlook.com    Please enter the following 'extra' attributesto be sent with your certificate requestA challenge password []:An optional company name []:
博主使用的是gogetssl的Comodo PositiveSSL，现在价格已经很便宜。
购买地址：https://www.gogetssl.com/domain-validation/comodo-positive-ssl/ 详细操作流程可以参考 https://imlonghao.com/15.html 得到证书后，将 yourdomain_com.crtCOMODORSADomainValidationSecureServerCA.crtCOMODORSAAddTrustCA.crt 这三个文件，分别打开，将内容按顺序复制，生成新的crt证书 RSA证书个ECC证书的区别，证书已经从RSA变为ECC证书