Set up an SSL certificate

What is SSL?

SSL (Secure Sockets Layer) is a standard security technology for establishing an encrypted link between a server and a client—typically a web server (website) and a browser (Chrome, Firefox, etc.)

SSL allows sensitive information such as credit card numbers, social security numbers, and login credentials to be transmitted securely.

In the case of the Gumroad Overlay, all transactions take place within a secure iFrame (which is an HTTPS rendering of Gumroad.com). However, having an SSL certificate provides an extra layer of protection against advanced hackers. Additionally, when customers see that your site is protected with an SSL certificate, their confidence is boosted and conversions increase.

We strongly recommend going with DigiCert to set up your SSL certificate, because of their incredible customer support. We've provided some resources here to get you started, but if you give them a call at any point in the setup process they will help guide you through. We are not affiliated with DigiCert in any way, just fans!

Another (free) option is Let's Encrypt.

Remember: It is not necessary to use the Gumroad Overlay if you are selling on your website. An alternative is to simply link to your Gumroad product, which will open in a new tab. This is still a smooth experience for your audience.

Four Steps to Setting up Your SSL Certificate

Step 1) Create your Certificate Signing Request (CSR)

Before you can order an SSL Certificate, you must first generate a Certificate Signing Request (CSR) for your server.

For instructions for setting up your CSR, click here

Step 2) Order your certificates

Next step is to purchase your certificate. Have a look at the various certificates and choose the one that's right for you. This will likely be either SSL Plus or Extended Validation.

Here are all of DigiCert's certification options, with links to purchase: http://www.digicert.com/ssl-certificate-comparison.htm

Step 3) Get validated

DigiCert will then validate your information. This involves an email authorization with included instructions to approve the certificate.

While that is happening, DigiCert's validation department will be verifying you or your company behind the scenes, usually with little or no involvement on your part. If their team does need something from you, they should get ahold of you within just a few minutes to let you know what it is that they need before they can issue your certificate.

Here is more information on the validation process: http://www.digicert.com/ssl-validation-process.htm

Step 4) Install your SSL Certificates

After you create your CSR, purchase your certificate, and the SSL Certificate validation and processing are complete, you are ready to install your SSL Certificate.
Your certificate will be provided via email or will be available to download in your DigiCert Management Console. The SSL Certificate is a text file with encrypted data that your server will use once the certificate is installed.

Here are instructions, by platform/OS, for installing your SSL Certificate: http://www.digicert.com/ssl-certificate-installation.htm