Patent ID: 8234490

Claim:
A server certificate issuing system comprising a registration server provided in a registration authority to receive a server certificate request transmitted from a Web server via a network and to transmit a certificate signing request file (CSR) to an issuing authority after performing a predetermined examination, and a certificate issuing server provided in the issuing authority to receive the CSR transmitted from the registration server, to generate a server certificate with a digital signature, and to transmit the generated server certificate to said registration server, wherein said Web server comprises a processor and memory storing instructions executed by the processor for: generating the server certificate request containing at least the address information of said Web server, transmitting the server certificate request to the registration server provided in the registration authority, and generating a verification page and indicating verification information used for user authentication on said verification page, wherein said registration server comprises a processor and memory storing instructions executed by the registration server's processor for: receiving the server certificate request transmitted from said Web server, accessing the verification page of the Web server based on the address information contained in the received server certificate request to read out the verification information indicated on the verification page, comparing the read verification information with the information contained in the server certificate request to verify whether or not the verification page has been generated, generating a key pair of a public key and a private key, generating the CSR including the generated public key, transmitting the generated CSR to the certificate issuing server, receiving the server certificate transmitted from the certificate issuing server, and transmitting the received server certificate to said Web server, and wherein said registration server transmits the CSR to the certificate issuing server only when said comparing verifies that the verification page has been generated.