Display better AMP URLs with Signed HTTP Exchange

Use emerging web packaging technologies to improve your AMP URLs

Google is working on a way to display better AMP URLs. This improvement relies on an emerging web packaging technology: Signed HTTP Exchange. The process works like this:

Sign an HTTP exchange (a request/response pair), which the server can deliver to the browser via a TLS certificate.
After loading this "Signed Exchange", the browser uses the TLS certificate to verify its integrity and authenticity as a regular HTTPS connection.
The Signed Exchange allows the browser to display your brand in the address bar and provide the added benefit of instant loading.

For more information about what Google is doing, see Signed HTTP Exchanges.

Not all TLS certificates are created equal

As part of the Signed HTTP Exchange technology specifications, the TLS certificate used to sign the exchange requires a special extension, CanSignHttpExchanges, and an Elliptic Curve Cryptography (ECC) keypair. DigiCert is happy to be among the very first CAs to support this extension in an ECC TLS certificate as we seek to encourage innovative technologies and the advancement of web protocols.

You'll need two certificates for the server: one for TLS connections and one for signing the HTTP exchanges.

Get your ECC TLS certificate with the CanSignHttpExchanges extension

To get your TLS certificate with the CanSignHttpExchanges extension included so you can start testing out this AMP URL improvement, you'll need a CertCentral account with the HTTP Signed Exchange feature enabled. For more details, see Get your Signed HTTP Exchange certificate.

Get your CertCentral account

Already have a DigiCert account? Don't worry, our experts can help you manage your account. Reach out to your account representative or contact our Support team.

Your information

First name

Last name

Email address

Organization information

This will be the primary organization on your account.

Organization name

Country

Address

(optional)

City

State

Postal code

Account information

Username

Valid characters are a–z, A–Z, 0–9, @, -, _, +

Password

10 characters or longer with 3 of the following: lowercase letter, capital letter, number, and symbol.

Confirm password

Security question

Security answer

I have read and agree to the terms of the Certificate Services Agreement.

Already have a DigiCert account? Don't worry, our experts can help you manage your account. Reach out to your account representative or contact our Support team.