I have been delegated the responsibility of the re-certification of our sites SSL certificate. I am working on an apache server and I am trying to do a dry run first to get my bearings as I have never done this before. I have the same version ubuntu server that I can mess around with I am also getting a free ssl certificate from www.startssl.com so the process is as authentic as I can make it. I think I have the basic process down. Are there any specific pitfalls I should be aware of? Possibly a few simple tips to make this process smoother I would appreciate anything since I am still not very well versed in linux.

4 Spice ups

create csr

http://www.digicert.com/csr-creation-apache.htm

install certificate:

http://www.digicert.com/ssl-certificate-installation.htm

2 Spice ups

+1 for digicert I had to do the same for a bunch of our web servers and have never done before, they made it a breeze

1 Spice up

Namecheap is great for aggressive pricing on certs. A Comodo domain validated cert is under $9.00/year…

https://www.namecheap.com/security/ssl-certificates/domain-validation.aspx

1 Spice up

I would not recommended for business level with StartSSL. I personal use it for my home exchange. If your business deal with liability I would consider some major player (Goddady, Digicert, Symantec (formerly VeriSign)). I would consider SAN (Subject Alternate Names). The process is pretty simple but i guess you might need to look into Youtube to get some ideas before start doing so. Once you got it just follow the link from mxtj.

1 Spice up