I have been able to implement an SSL layer for a project in the company. I used the keytool. Is this authentication enough to handle process like credit card data transfer. Do I have to use Verisign certificates. If so how do I do that. Do I get to buy a server cerificate and a client certificate, like the ones I created using keytool. And how do I implement it in my java(SOAP client) code