This FAQ is divided into the following sections:
Shengzhao CA is a Certificate Authority (CA) that provides services for obtaining, renewing, and managing SSL/TLS certificates for members of the Internal Trust Alliance. Websites can use our certificates to enable internally trusted HTTPS connections.
There is no fee for issuing certificates. We are dedicated to providing free and convenient services to help all websites deploy HTTPS.
Some service providers (such as web hosting services) may charge a small fee to cover the administrative costs of providing certificates.
For most browsers and operating systems, no. See the compatibility list for details.
No. Never.
The private key is always generated and managed on your own servers, not by Shengzhao CA.
Senior cybersecurity scholar Ivan Ristić published a configuration guide listing things to note when setting up TLS, which is highly valuable.
If you want to learn more extensive and in-depth background knowledge, we recommend another book by Ristić, Bulletproof TLS and PKI.