31 ms·
By default, StartSSL's wizard generates private keys for you. (Providing your own key is of course an option).
by subway 11y ago
By default, StartSSL's wizard generates private keys for you. (Providing your own key is of course an option).
- 0x0 11y agoFor the higher account levels, they also require uploaded scans/photos of sensitive ID documents like passports / drivers' licenses.
- Laforet 11y agoYes, that's a problem. If a company starts to ask for this sort of information I will refuse unless there are no alternatives. Trusting a CA to provide your private key is on another matter.
- pluma 11y agoThere are people who use StartSSL for paid certificates? I though the free certs were the only reason people put up with their craptacular website.
- 0x0 11y agoIt used to be a pretty sweet deal, for $60 you could get unlimited multi-domain multi-wildcard certs. Most other CAs charged more than that for a single wildcard cert, and noone else seems to even offer multiple wildcard domains in a single cert. Which was quite sensible, actually. Charge for the actual costly process of manually verifying ID, and then allow for unlimited free domain-validations to be issued to the corresponding ID (which is the machine-automatable part).
- deleted 11y ago[deleted]
- kennycox 11y agoAfter searching the web and comparing the different price rates, I just found a lowest wildcard SSL at $42/yr. at https://www.ssl2buy.com https://www.ssl2buy.com. I hope that you would not find cheaper than this wildcard SSL. As they did not charge any extra beyond the price and helped me to secure my number of sub domains. Even the backend technical support was good enough.
- Tepix 11y agoI agree that's sneaky. I would never use that feature - it's an invitation to do MITM attacks later on. When I first saw the form with this option on their website I thought "oh so that's why the Mossad is running this CA for free..."