{"id":12366130,"date":"2026-03-13T17:27:56","date_gmt":"2026-03-13T09:27:56","guid":{"rendered":"https:\/\/www.likacloud.com\/knowledge\/ssl%e8%af%81%e4%b9%a6%e7%bb%88%e6%9e%81%e6%8c%87%e5%8d%97%ef%bc%9a%e4%bb%8e%e5%85%a5%e9%97%a8%e5%88%b0%e7%b2%be%e9%80%9a%ef%bc%8c%e5%bc%80%e5%90%af%e7%bd%91%e7%ab%99https%e4%b9%8b%e6%97%85\/"},"modified":"2026-03-13T19:07:41","modified_gmt":"2026-03-13T11:07:41","slug":"ssl-certificate-guide-from-beginner-to-expert-https-website-security","status":"publish","type":"knowledge_post","link":"https:\/\/www.likacloud.com\/tr\/knowledge\/ssl-certificate\/ssl-certificate-guide-from-beginner-to-expert-https-website-security\/","title":{"rendered":"SSL Sertifikas\u0131 K\u0131lavuzu: Ba\u015flang\u0131\u00e7tan Uzmanl\u0131\u011fa, Web Sitelerinizin HTTPS Yolculu\u011funa Ba\u015flay\u0131n"},"content":{"rendered":"

G\u00fcn\u00fcm\u00fcz internet ortam\u0131nda, web sitesi g\u00fcvenli\u011fi kullan\u0131c\u0131lar\u0131n g\u00fcveninin temel ta\u015f\u0131d\u0131r. SSL sertifikas\u0131, bu g\u00fcvenli\u011fi sa\u011flaman\u0131n temel teknolojisidir ve istemci (\u00f6rne\u011fin taray\u0131c\u0131) ile sunucu aras\u0131nda \u015fifreli bir ba\u011flant\u0131 kurarak, iletilen t\u00fcm verilerin gizli ve b\u00fct\u00fcn olmas\u0131n\u0131 sa\u011flar. SSL sertifikas\u0131 kullanan bir web sitesini ziyaret etti\u011finizde, adres \u00e7ubu\u011funda \u201chttps:\/\/\u201d \u00f6n ekli ve bir kilit simgesi g\u00f6r\u00fcn\u00fcr; bu da ba\u011flant\u0131n\u0131n g\u00fcvenli oldu\u011funu g\u00f6sterir.<\/p>\n\n\n\n

SSL sertifikas\u0131 olmayan web siteleri \u201chttp:\/\/\u201d protokol\u00fcn\u00fc kullan\u0131r ve verileri \u015fifresiz olarak iletilir; bu da verilerin \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar taraf\u0131ndan kolayca ele ge\u00e7irilmesine ve dinlenmesine neden olur. Bu durum, giri\u015f yapmay\u0131, \u00f6deme yapmay\u0131 veya ki\u015fisel bilgileri g\u00f6ndermeyi gerektiren web siteleri i\u00e7in b\u00fcy\u00fck bir risktir. Bu nedenle, ister ki\u015fisel bloglar olsun, ister kurumsal web siteleri isterse e-ticaret platformlar\u0131; SSL sertifikas\u0131 kullanmak temel ve zorunlu bir ad\u0131md\u0131r.<\/p>\n\n\n\n

SSL sertifikas\u0131n\u0131n temel \u00e7al\u0131\u015fma prensibi<\/h2>\n\n\n\n

SSL sertifikas\u0131n\u0131n temel i\u015flevi, HTTPS protokol\u00fcn\u00fc etkinle\u015ftirmektir ve bunun arkas\u0131nda gizli bir \u015fifreleme ve do\u011frulama mekanizmas\u0131 yatmaktad\u0131r.<\/p>\n\n\n\n

Asimetrik \u015fifreleme ile simetrik \u015fifrelemenin birle\u015ftirilmesi<\/h3>\n\n\n\n

SSL\/TLS el s\u0131kma (handshake) s\u00fcreci, iki farkl\u0131 \u015fifreleme y\u00f6ntemini ustaca bir araya getirir. \u00d6ncelikle, bir \u201coturum anahtar\u0131\u201dn\u0131n g\u00fcvenli bir \u015fekilde de\u011fi\u015f toku\u015fu i\u00e7in asimetrik \u015fifreleme (\u00f6rne\u011fin RSA, ECC) kullan\u0131l\u0131r. Sunucu \u00f6zel anahtar\u0131 elinde tutar; buna kar\u015f\u0131l\u0131k gelen genel anahtar ise SSL sertifikas\u0131nda bulunur ve taray\u0131c\u0131ya g\u00f6nderilir.<\/p>\n\n\n\n

Taray\u0131c\u0131, bu genel anahtar\u0131 kullanarak rastgele olu\u015fturulmu\u015f bir \u201c\u00f6n anahtar\u201d\u0131 \u015fifreler ve bunu sunucuya g\u00f6nderir; yaln\u0131zca \u00f6zel anahtara sahip olan sunucu bu anahtar\u0131 \u00e7\u00f6zebilir. Her iki taraf da bu \u201c\u00f6n anahtar\u201da dayanarak ayn\u0131 \u201coturum anahtar\u0131n\u0131\u201d hesaplar. Daha sonra ileti\u015fim, bu \u201coturum anahtar\u0131\u201d kullan\u0131larak yap\u0131lan simetrik \u015fifreleme (\u00f6rne\u011fin AES) y\u00f6ntemiyle devam eder; \u00e7\u00fcnk\u00fc simetrik \u015fifreleme, b\u00fcy\u00fck miktarda veri i\u015flerken daha y\u00fcksek verimlilik sa\u011flar.<\/p>\n\n

\r\n\t\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Bluehost\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\tBluehost SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tBlueHost SSL sertifikalar\u0131, 1-2 y\u0131ll\u0131k uzatma s\u00fcresi se\u00e7enekleri sunar, RSA veya ECC algoritmalar\u0131n\u0131 destekler, 4096 bit'e kadar anahtar uzunlu\u011fu sa\u011flar ve 1,75 milyon ABD dolar\u0131na kadar garanti tutar\u0131 sunar.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $7,49 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tBluehost SSL sertifikas\u0131na eri\u015fin \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n\t\r\n\t
\r\n\t\t
\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"hosting.com\r\n\t\t\t\t\t\t\t\t\t\r\n\t\t\t<\/div>\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\thosting.com SSL sertifikas\u0131.<\/strong>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t<\/div>\r\n\t\t<\/div>\r\n\t\t\t\tUygun fiyatl\u0131 DV, OV, EV SSL sertifikalar\u0131, en y\u00fcksek 256 bit \u015fifreleme, 5 milyon ila 100 milyon ABD dolar\u0131 tutar\u0131nda garanti ve 7\/24 destek.<\/span>\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t\t\t\t\r\n\t\t\t \r\n\t\t\t
\r\n\t\t\t\t\t\t\t\t
Ayl\u0131k $2.5 USD'den ba\u015flayan fiyatlarla.<\/div>\r\n\t\t\t\t\t\t\t\t\t\t\t\tHosting.com SSL sertifikas\u0131na eri\u015fin. \u2192<\/a>\r\n\t\t\t\t\t\t\t<\/div> \r\n\t\t<\/div>\r\n\t<\/div>\r\n\t\t\r\n<\/div>\r\n\r\n\r\n\n\n\n\n\n\n\n

Dijital Sertifikalar ve CA\u2019n\u0131n G\u00fcven Zinciri<\/h3>\n\n\n\n

SSL sertifikas\u0131 asl\u0131nda dijital bir dosyad\u0131r ve i\u00e7inde web sitesinin kamusal anahtar\u0131, sahibinin kimlik bilgileri ve bu sertifikay\u0131 veren sertifika yetkilendirme kurulu\u015funun dijital imzas\u0131 bulunur. Taray\u0131c\u0131larda, g\u00fcvenilir k\u00f6k sertifika yetkilendirme kurulu\u015flar\u0131n\u0131n listesi yerle\u015fik olarak bulunur.<\/p>\n\n\n\n

Taray\u0131c\u0131, sunucudan gelen sertifikay\u0131 ald\u0131\u011f\u0131nda, sertifikan\u0131n imzas\u0131n\u0131n g\u00fcvendi\u011fi CA (Certificate Authority \u2013 Sertifika Yetkilisi)\u201cdan geldi\u011fini do\u011frular; ayr\u0131ca sertifikan\u0131n ge\u00e7erlilik s\u00fcresi i\u00e7inde olup olmad\u0131\u011f\u0131n\u0131 ve ziyaret edilen alan ad\u0131yla e\u015fle\u015fip e\u015fle\u015fmedi\u011fini kontrol eder. Bu do\u011frulama s\u00fcreci, \u201dg\u00fcven zinciri\u201dni olu\u015fturur ve kullan\u0131c\u0131lar\u0131n sahte (doland\u0131r\u0131c\u0131l\u0131k ama\u00e7l\u0131) web sitelerine de\u011fil, ger\u00e7ek ve yasal web sitelerine ba\u011fland\u0131klar\u0131ndan emin olur.<\/p>\n\n\n\n

SSL sertifikalar\u0131n\u0131n ana tipleri ve se\u00e7imi.<\/h2>\n\n\n\n

Do\u011frulama seviyesine ve kapsanan alan ad\u0131 say\u0131s\u0131na g\u00f6re, SSL sertifikalar\u0131 farkl\u0131 ihtiya\u00e7lar\u0131 kar\u015f\u0131lamak i\u00e7in a\u015fa\u011f\u0131daki t\u00fcrlere ayr\u0131l\u0131r:<\/p>\n\n\n\n

Domain do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

DV sertifikalar\u0131, en h\u0131zl\u0131 verilen ve en d\u00fc\u015f\u00fck maliyetli sertifika t\u00fcrleridir. CA (Certificate Authority \u2013 Sertifika Yetkilisi), ba\u015fvuru sahibinin alan ad\u0131 \u00fczerindeki kontrol haklar\u0131n\u0131 do\u011frular (\u00f6rne\u011fin, alan ad\u0131na kay\u0131tl\u0131 e-posta adresine do\u011frulama e-postas\u0131 g\u00f6ndererek veya belirli DNS kay\u0131tlar\u0131 ayarlayarak). Temel \u015fifreleme \u00f6zellikleri sunar ve ki\u015fisel web siteleri, bloglar veya test ortamlar\u0131 i\u00e7in uygundur. Taray\u0131c\u0131lar, kilit i\u015fareti ve HTTPS protokol\u00fcn\u00fc g\u00f6sterir.<\/p>\n\n\n\n

Kurulu\u015f do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

OV sertifikalar\u0131, DV (Domain Validation) do\u011frulamas\u0131n\u0131n yan\u0131 s\u0131ra, ba\u015fvuru yapan kurulu\u015fun ger\u00e7ekli\u011fine y\u00f6nelik de s\u0131k\u0131 incelemeler yapar. CA (Certificate Authority), \u015firketin resmi kay\u0131t bilgilerini (\u00f6rne\u011fin i\u015fletme lisans\u0131n\u0131) do\u011frular. Sertifika detaylar\u0131nda do\u011frulanm\u0131\u015f \u015firket ad\u0131 yer al\u0131r ve bu da kurumsal kullan\u0131c\u0131lar\u0131n g\u00fcvenini art\u0131rmaya yard\u0131mc\u0131 olur. Genellikle kurumsal web siteleri ve ticari platformlarda kullan\u0131l\u0131r.<\/p>\n\n\n\n

Geni\u015fletilmi\u015f do\u011frulama sertifikas\u0131.<\/h3>\n\n\n\n

EV sertifikalar\u0131, en s\u0131k\u0131 do\u011frulama s\u00fcre\u00e7lerinden ge\u00e7en ve en y\u00fcksek g\u00fcven seviyesine sahip sertifikalard\u0131r. Kurumsal do\u011frulaman\u0131n yan\u0131 s\u0131ra, CA (Certificate Authority \u2013 Sertifika Yetkilisi) daha kapsaml\u0131 arka plan incelemeleri de yapar. En \u00f6nemli \u00f6zelli\u011fi, baz\u0131 taray\u0131c\u0131larda EV sertifikas\u0131 bulunan web sitelerinin adres \u00e7ubu\u011funda do\u011frudan ye\u015fil renkte \u015firket ad\u0131n\u0131n g\u00f6r\u00fcnmesidir; bu da kullan\u0131c\u0131lara en do\u011frudan kimlik do\u011frulama imkan\u0131 sunar. Finans, \u00f6deme ve b\u00fcy\u00fck e-ticaret siteleri genellikle bu t\u00fcr sertifikalar\u0131 kullan\u0131r.<\/p>\n\n\n\n

\u00c7oklu alan ad\u0131 ve joker karakter sertifikas\u0131.<\/h3>\n\n\n\n

Do\u011frulama seviyesinin yan\u0131 s\u0131ra, kapsama alan\u0131na g\u00f6re de se\u00e7im yap\u0131labilir. Tek alan ad\u0131 sertifikas\u0131 yaln\u0131zca belirli bir alan ad\u0131n\u0131 korur (\u00f6rne\u011fin\u2026). www.example.com<\/code>\u00c7ok alan adl\u0131 sertifikalar, tek bir sertifika i\u00e7inde birbirinden tamamen farkl\u0131 birden fazla alan ad\u0131n\u0131 i\u00e7erebilir. Jenerik (wildcard) sertifikalar ise bir ana alan ad\u0131n\u0131 ve t\u00fcm ayn\u0131 seviyedeki alt alan adlar\u0131n\u0131 koruyabilir. *.example.com<\/code> \u00d6rtme blog.example.com<\/code>, shop.example.com<\/code>Birden fazla alt sitesi olan kurulu\u015flar i\u00e7in olduk\u00e7a esnek ve verimlidir.<\/p>\n\n\n\n

SSL sertifikas\u0131 nas\u0131l talep edilir ve kurulur?<\/h2>\n\n\n\n

SSL sertifikas\u0131n\u0131n da\u011f\u0131t\u0131m s\u00fcreci genellikle ba\u015fvuru, do\u011frulama, indirme ve kurma ad\u0131mlar\u0131n\u0131 i\u00e7erir.<\/p>\n\n\n

\n\n
\n UltaHost SSL sertifikas\u0131.<\/strong>\n
DV, EV, OV sertifikalar\u0131, en fazla $1, 750.000 ABD dolar\u0131 teminat tutar\u0131n\u0131 destekler, s\u0131n\u0131rs\u0131z alt alan ad\u0131n\u0131 destekler, iOS ve Android uygulamalar\u0131n\u0131 destekler ve 20%'den ba\u015flayan ayl\u0131k $15,95 ABD dolar\u0131 fiyatla 30 g\u00fcnl\u00fck para iade garantisi sunar.<\/div>\n <\/div>\n\n
\n \n \n \"SSL\n \n \n <\/a>\n \n \n UltaHost'u ziyaret edin. <\/a>\n <\/div>\n <\/div>\n\n \n\n\n\n\n\n\n

Sertifika Ba\u015fvuru S\u00fcreci<\/h3>\n\n\n\n

\u00d6ncelikle, sunucunuzda veya bar\u0131nd\u0131rma platformunuzda bir CSR (Certificate Signing Request \u2013 Sertifika \u0130mzalama \u0130ste\u011fi) dosyas\u0131 olu\u015fturman\u0131z gerekiyor. CSR dosyas\u0131, genel anahtar\u0131n\u0131z\u0131 ve CA\u2019ya (Certificate Authority \u2013 Sertifika Yetkilisi) g\u00f6nderece\u011finiz kurulu\u015f bilgilerini i\u00e7erir. Daha sonra, sertifika talebinde bulunmak i\u00e7in se\u00e7ti\u011finiz CA\u2019ya veya onun acentesine bu CSR dosyas\u0131n\u0131 g\u00f6nderin.<\/p>\n\n\n\n

Se\u00e7ti\u011finiz sertifika t\u00fcr\u00fcne g\u00f6re ilgili do\u011frulama s\u00fcrecini tamamlay\u0131n. DV sertifikalar\u0131 i\u00e7in do\u011frulama genellikle birka\u00e7 dakika ile birka\u00e7 saat aras\u0131nda tamamlan\u0131r; OV\/EV sertifikalar\u0131 ise birka\u00e7 g\u00fcn s\u00fcrer. Do\u011frulama ba\u015far\u0131l\u0131 olduktan sonra, CA\u2019dan SSL sertifika dosyas\u0131n\u0131 alacaks\u0131n\u0131z (genellikle i\u00e7inde\u2026).crt<\/code>\u6216.cer<\/code>Dosya ve olas\u0131 ara sertifika zincirleri.<\/p>\n\n\n\n

Sunucu Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h3>\n\n\n\n

Y\u00fckleme ad\u0131mlar\u0131, kullan\u0131lan sunucu yaz\u0131l\u0131m\u0131na g\u00f6re de\u011fi\u015fiklik g\u00f6sterir. Pop\u00fcler Apache sunucular\u0131 i\u00e7in, sanal sunucu (virtual host) dosyalar\u0131n\u0131 yap\u0131land\u0131rman\u0131z, sertifika dosyas\u0131n\u0131n, \u00f6zel anahtar dosyas\u0131n\u0131n ve sertifika zinciri dosyas\u0131n\u0131n yolunu belirtmeniz gerekir. Nginx sunucular\u0131 i\u00e7in de, SSL sertifikas\u0131n\u0131n ve anahtar\u0131n\u0131n bulundu\u011fu yeri sunucu yap\u0131land\u0131rma b\u00f6l\u00fcm\u00fcnde belirtmeniz gerekmektedir.<\/p>\n\n\n\n

Y\u00fckleme i\u015flemi tamamland\u0131ktan sonra, t\u00fcm HTTP trafi\u011finin zorunlu olarak HTTPS\u2019ye y\u00f6nlendirilmesini sa\u011flay\u0131n. Bu, sunucu ayarlar\u0131nda bulunan 301 y\u00f6nlendirme kurallar\u0131 arac\u0131l\u0131\u011f\u0131yla ger\u00e7ekle\u015ftirilebilir. Son olarak, \u00e7evrimi\u00e7i SSL denetim ara\u00e7lar\u0131n\u0131 kullanarak sertifikan\u0131n do\u011fru bir \u015fekilde y\u00fcklendi\u011fini, g\u00fcvenilir oldu\u011funu ve g\u00fcvenli \u015fifreleme paketlerinin do\u011fru \u015fekilde yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n.<\/p>\n\n\n\n

Sertifika Ya\u015fam D\u00f6ng\u00fcs\u00fc Y\u00f6netimi ve En \u0130yi Uygulamalar<\/h2>\n\n\n\n

Sertifikalar\u0131n da\u011f\u0131t\u0131lmas\u0131 tek seferlik bir i\u015flem de\u011fildir; etkili bir ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netimi, g\u00fcvenli\u011fin s\u00fcrd\u00fcr\u00fclmesi i\u00e7in hayati \u00f6neme sahiptir.<\/p>\n\n\n\n

Zaman\u0131nda yenileme ve otomasyon<\/h3>\n\n\n\n

SSL sertifikalar\u0131n\u0131n belirgin bir ge\u00e7erlilik s\u00fcresi vard\u0131r. Eskiden sertifika s\u00fcreleri birka\u00e7 y\u0131l kadar olabiliyordu; ancak a\u011f g\u00fcvenli\u011finin genel esnekli\u011fini art\u0131rmak amac\u0131yla end\u00fcstri standartlar\u0131 bu s\u00fcreyi genellikle bir y\u0131la veya daha k\u0131sa bir s\u00fcreye indirdi. Sertifikan\u0131z\u0131n s\u00fcresi dolmadan \u00f6nce mutlaka yenilenmesi gerekmektedir. Aksi takdirde web sitenizde g\u00fcvenlik uyar\u0131lar\u0131 g\u00f6r\u00fcnecek ve kullan\u0131c\u0131lar sitenize eri\u015femeyecektir.<\/p>\n\n\n\n

\u5f3a\u70c8\u63a8\u8350\u4f7f\u7528\u81ea\u52a8\u5316\u5de5\u5177\u7ba1\u7406\u8bc1\u4e66\u7eed\u8ba2\u3002Let\u2018s Encrypt\u7b49\u514d\u8d39CA\u63d0\u4f9b\u4e86\u5b8c\u5168\u81ea\u52a8\u5316\u7684ACME\u534f\u8bae\uff0c\u53ef\u4ee5\u81ea\u52a8\u5b8c\u6210\u9a8c\u8bc1\u3001\u7b7e\u53d1\u548c\u90e8\u7f72\uff0c\u6781\u5927\u964d\u4f4e\u4e86\u7ba1\u7406\u8d1f\u62c5\u548c\u4eba\u4e3a\u9057\u5fd8\u7684\u98ce\u9669\u3002<\/p>\n\n\n\n

HTTP\/2\u2019yi etkinle\u015ftirin ve g\u00fcvenlik ayarlar\u0131n\u0131 g\u00fc\u00e7lendirin.<\/h3>\n\n\n\n

Sertifikan\u0131n y\u00fcklenmesinin yan\u0131 s\u0131ra, ek g\u00fcvenlik ayarlamalar\u0131 da yap\u0131lmal\u0131d\u0131r. G\u00fcvenli olmayan eski protokollerin (\u00f6rne\u011fin SSLv2, SSLv3) ve zay\u0131f \u015fifreleme paketlerinin devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131\u011f\u0131ndan emin olun. HTTP\/2 protokol\u00fcn\u00fcn etkinle\u015ftirilmesi, HTTPS sitelerinin performans\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131rabilir.<\/p>\n\n\n\n

Ayn\u0131 zamanda, HSTS (HTTP Strict Transport Security) politikas\u0131n\u0131n uygulanmas\u0131n\u0131 da d\u00fc\u015f\u00fcnebilirsiniz. Bu politika, yan\u0131t ba\u015fl\u0131klar\u0131 arac\u0131l\u0131\u011f\u0131yla taray\u0131c\u0131lara belirli bir s\u00fcre boyunca web sitesine yaln\u0131zca HTTPS \u00fczerinden eri\u015filmesi gerekti\u011fini bildirir ve bu da SSL \u00e7\u0131karma (SSL stripping) sald\u0131r\u0131lar\u0131na kar\u015f\u0131 etkili bir koruma sa\u011flar. Web sitenizi, b\u00fcy\u00fck taray\u0131c\u0131lar\u0131n yerle\u015fik HSTS \u00f6nceden y\u00fckleme (preloading) listelerine ekletmek ise daha kapsaml\u0131 bir g\u00fcvence olacakt\u0131r.<\/p>\n\n\n\n

\u00d6zetle.<\/h2>\n\n\n\n

SSL sertifikalar\u0131, g\u00fcvenli ve g\u00fcvenilir bir internet ortam\u0131 olu\u015fturman\u0131n temel ta\u015flar\u0131d\u0131r. En temel DV sertifikalar\u0131ndan en y\u00fcksek g\u00fcven d\u00fczeyini sa\u011flayan EV sertifikalar\u0131na kadar, farkl\u0131 \u00f6l\u00e7eklerdeki web siteleri i\u00e7in \u00f6zel olarak tasarlanm\u0131\u015f \u015fifreleme ve kimlik do\u011frulama \u00e7\u00f6z\u00fcmleri sunarlar. SSL sertifikalar\u0131n\u0131n \u00e7al\u0131\u015fma prensiplerini anlamak, do\u011fru sertifika t\u00fcr\u00fcn\u00fc se\u00e7mek, kurulumunu do\u011fru bir \u015fekilde ger\u00e7ekle\u015ftirmek ve s\u00fcrekli bir ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netimi uygulamak, her web sitesi sahibi, geli\u015ftirici ve operasyonel personel i\u00e7in temel becerilerdir. HTTPS\u2019yi benimsemek sadece bir g\u00fcvenlik \u00f6nlemi de\u011fil; ayn\u0131 zamanda kullan\u0131c\u0131 deneyimi ve arama motoru s\u0131ralamalar\u0131 a\u00e7\u0131s\u0131ndan da olumlu bir yat\u0131r\u0131md\u0131r ve dijital \u00e7a\u011fda web sitelerinin ayakta kalabilmesi i\u00e7in ka\u00e7\u0131n\u0131lmaz bir se\u00e7enektir.<\/p>\n\n\n\n

S\u0131k\u00e7a Sorulan Sorular.<\/h2>\n\n\n\n

Web sitesinde bir i\u015flem (sat\u0131n alma\/satma) \u00f6zelli\u011fi yoksa bile SSL sertifikas\u0131na ihtiya\u00e7 var m\u0131?<\/h3>\n\n\n\n

Evet, ger\u00e7ekten \u00e7ok gerekiyor. Modern taray\u0131c\u0131lar t\u00fcm HTTP sitelerini \u201cg\u00fcvenli de\u011fil\u201d olarak i\u015faretliyor ve bu, kullan\u0131c\u0131lar\u0131n g\u00fcvenini ve sitelerin profesyonel imaj\u0131n\u0131 ciddi \u015fekilde etkiliyor. Ayr\u0131ca, Google gibi arama motorlar\u0131 HTTPS\u2019yi arama s\u0131ralamalar\u0131nda olumlu bir fakt\u00f6r olarak de\u011ferlendiriyor. Hatta sadece statik bir g\u00f6sterim sayfas\u0131 olsa bile, SSL sertifikas\u0131 kullan\u0131c\u0131 gizlili\u011fini koruyarak i\u00e7eri\u011fin de\u011fi\u015ftirilmesini engelliyor.<\/p>\n\n\n\n

HTTPS, web sitelerinin h\u0131z\u0131n\u0131 yava\u015flat\u0131r m\u0131?<\/h3>\n\n\n\n

Eski SSL protokol\u00fcyle yap\u0131lan el s\u0131k\u0131\u015fma (handshake) i\u015flemleri k\u00fc\u00e7\u00fck gecikmelere neden olurdu; ancak modern TLS protokolleri ve donan\u0131m performanslar\u0131 bu s\u00fcreci b\u00fcy\u00fck \u00f6l\u00e7\u00fcde iyile\u015ftirdi. HTTP\/2 protokol\u00fcn\u00fcn kullan\u0131lmas\u0131 ve \u015fifreleme algoritmalar\u0131n\u0131n optimize edilmesi gibi y\u00f6ntemlerle, HTTPS sitelerinin performans\u0131 HTTP ile k\u0131yaslanabilir hatta daha h\u0131zl\u0131 olabilir. Performans \u00fczerindeki k\u00fc\u00e7\u00fck kay\u0131plar, sa\u011flad\u0131\u011f\u0131 b\u00fcy\u00fck g\u00fcvenlik ve g\u00fcvenlik avantajlar\u0131yla k\u0131yasland\u0131\u011f\u0131nda kesinlikle kabul edilebilir d\u00fczeydedir.<\/p>\n\n\n\n

\u00dccretsiz SSL sertifikalar\u0131n\u0131n \u00fccretli olanlardan ne fark\u0131 var?<\/h3>\n\n\n\n

\u514d\u8d39\u8bc1\u4e66\uff08\u5982Let\u2018s Encrypt\u7b7e\u53d1\u7684\u5927\u591a\u4e3aDV\u8bc1\u4e66\uff09\u5728\u52a0\u5bc6\u5f3a\u5ea6\u4e0a\u4e0e\u4ed8\u8d39\u8bc1\u4e66\u5e76\u65e0\u533a\u522b\u3002\u4e3b\u8981\u533a\u522b\u5728\u4e8e\uff1a\u514d\u8d39\u8bc1\u4e66\u6709\u6548\u671f\u77ed\uff08\u901a\u5e3890\u5929\uff09\uff0c\u9700\u9891\u7e41\u81ea\u52a8\u7eed\u8ba2\uff1b\u4e00\u822c\u53ea\u63d0\u4f9b\u57df\u540d\u9a8c\u8bc1\uff1b\u4e0d\u63d0\u4f9b\u8d44\u91d1\u8d54\u507f\u4fdd\u969c\u3002\u4ed8\u8d39\u8bc1\u4e66\u5219\u63d0\u4f9bOV\/EV\u7ea7\u9a8c\u8bc1\u3001\u66f4\u957f\u7684\u53ef\u9009\u6709\u6548\u671f\u3001\u6280\u672f\u652f\u6301\u4ee5\u53ca\u56e0\u8bc1\u4e66\u95ee\u9898\u5bfc\u81f4\u635f\u5931\u7684\u7ecf\u6d4e\u8d54\u507f\u62c5\u4fdd\u3002<\/p>\n\n\n\n

SSL sertifikas\u0131 y\u00fcklendikten sonra neden taray\u0131c\u0131 hala g\u00fcvensiz olarak g\u00f6steriliyor?<\/h3>\n\n\n\n

Bu durum genellikle \u201ckar\u0131\u015f\u0131k i\u00e7erik\u201d (mixed content) nedeniyle olur. Ana sayfa HTTPS \u00fczerinden y\u00fcklenmesine ra\u011fmen, sayfada yer alan baz\u0131 kaynaklar (resimler, JavaScript dosyalar\u0131, CSS dosyalar\u0131 vb.) g\u00fcvenli olmayan HTTP ba\u011flant\u0131lar\u0131 arac\u0131l\u0131\u011f\u0131yla y\u00fcklenir. Bu durum, taray\u0131c\u0131n\u0131n sayfay\u0131 g\u00fcvenli olmayan olarak de\u011ferlendirmesine neden olur. Sorunu \u00e7\u00f6zmek i\u00e7in sayfadaki t\u00fcm kaynaklar\u0131n HTTPS ba\u011flant\u0131lar\u0131 kullanmas\u0131n\u0131 sa\u011flaman\u0131z gerekir. Hangi kaynaklar\u0131n g\u00fcvenli olmayan ba\u011flant\u0131lar kulland\u0131\u011f\u0131n\u0131 g\u00f6rmek i\u00e7in geli\u015ftirici ara\u00e7lar\u0131n\u0131n konsolunu kullanabilirsiniz.<\/p>\n\n\n\n

Bir SSL sertifikas\u0131, birden fazla sunucu veya alan ad\u0131 i\u00e7in kullan\u0131labilir mi?<\/h3>\n\n\n\n

Bu, sertifika t\u00fcr\u00fcne ba\u011fl\u0131d\u0131r. Tek alan ad\u0131na sahip sertifikalar genellikle yaln\u0131zca belirli bir alan ad\u0131 i\u00e7in kullan\u0131labilir. \u00c7ok alan ad\u0131na sahip sertifikalar, sat\u0131n al\u0131nd\u0131\u011f\u0131nda ayn\u0131 sertifika alt\u0131na birden fazla farkl\u0131 alan ad\u0131n\u0131n eklenmesine olanak tan\u0131r. Jenerik (wildcard) sertifikalar ise bir alan ad\u0131n\u0131 ve t\u00fcm alt alan adlar\u0131n\u0131 korur. E\u011fer y\u00fck dengelemesi (load balancing) sa\u011flamak i\u00e7in ayn\u0131 hizmeti birden fazla sunucuda da\u011f\u0131tmak istiyorsan\u0131z, bir\u00e7ok sertifika yetkilendirme kurulu\u015fu (CA \u2013 Certificate Authority) ayn\u0131 sertifika i\u00e7in birden fazla kopya talep etmenize izin verir.<\/p>","protected":false},"excerpt":{"rendered":"

Bu makale, SSL sertifikalar\u0131n\u0131n temel i\u015flevlerini ve \u00e7al\u0131\u015fma prensiplerini; \u015fifreleme s\u00fcrecini ve g\u00fcven zincirini sistemli bir \u015fekilde a\u00e7\u0131klamaktad\u0131r. DV, OV, EV gibi farkl\u0131 t\u00fcrdeki sertifikalar\u0131n uygun kullan\u0131m senaryolar\u0131n\u0131 ayr\u0131nt\u0131l\u0131 olarak kar\u015f\u0131la\u015ft\u0131rmakta ve ba\u015fvuru, do\u011frulama s\u00fcre\u00e7lerinden sunucuya y\u00fckleme ve yap\u0131land\u0131rmaya kadar olan t\u00fcm ad\u0131mlar\u0131 i\u00e7eren kapsaml\u0131 bir rehber sunmaktad\u0131r. Ayr\u0131ca, sertifika ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netiminin \u00f6nemine vurgu yap\u0131lmaktad\u0131r.<\/p>","protected":false},"author":7,"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[],"knowledge_category":[277],"class_list":["post-12366130","knowledge_post","type-knowledge_post","status-publish","hentry","knowledge_category-ssl-certificate"],"acf":{"site_seo_keywords":"SSL\u8bc1\u4e66,HTTPS,\u7f51\u7ad9\u5b89\u5168,\u52a0\u5bc6,\u8bc1\u4e66\u7533\u8bf7,CA\u673a\u6784,\u901a\u914d\u7b26\u8bc1\u4e66,SSL\u8bc1\u4e66\u5b89\u88c5\u6307\u5357"},"_links":{"self":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12366130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts"}],"about":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/types\/knowledge_post"}],"author":[{"embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":0,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_posts\/12366130\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/media?parent=12366130"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/tags?post=12366130"},{"taxonomy":"knowledge_category","embeddable":true,"href":"https:\/\/www.likacloud.com\/tr\/wp-json\/wp\/v2\/knowledge_category?post=12366130"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}