Select Type of SSL Certificate

The first step to acquiring a manual SSL certificate is to identify what type you need. You might want a manual certificate instead of the automatic one from NetSuite if you need an Extended Validation (EV) certificate for your domain. EV certificates require a more thorough validation process before they're issued.

You can select an SSL certificate from the vendor of your choice, but it must meet the following requirements:

• All SSL certificates you want to use with NetSuite require:

  • A 2048–bit RSA (private and public) key. 4096–bit key lengths are not supported.

  • The private key must use the PKCS#1 RSA Cryptography Standard.

    Note:

    The PKCS#8 Private-Key Information Syntax Standard isn't supported. See How can I change the private key from PKCS#8 to PKCS#1? if the private key issued to you uses the PKCS#8 standard.

  • Must be Apache-compatible and PEM-encoded.

• You need to buy SSL certificates that use the SHA-2 hash function or better. For more information, see Supported TLS Protocol and Cipher Suites.

• The following are not supported:

  • Wildcard certificates

  • Self-signed certificates

  • ECC (Elliptic Curve Cryptography) SSL certificates

  • Subject Alternative Name (SAN) fields on an SSL certificate (that is, adding multiple domain names to a single certificate). Only the Subject Name on a certificate is considered. In cases where SANs are specified on a certificate (using a subjectAltName field), they are ignored.

For a list of certificate authorities, see the Mozilla Included CA Certificate List.

General Notices