5 ms·

This links to ZeroSSL. They only offer 3 domains for free on their pricing page. https://zerossl.com/pricing/ https://zerossl.com/pricing/

richardwhiuk 6y ago
Plus no wildcard support (which Let's Encrypt provides). They say "No REST API access" - but presumably ACME does work?
- edoceo 6y ago
  What! LE does wildcard now!? /me searches... https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578 https://community.letsencrypt.org/t/acme-v2-production-envir...
  - zymhan 6y ago
    Oh yes, it's a lifesaver.
- rohansingh 6y ago
  Yeah, looks like ACME is indeed free and includes wildcards: https://zerossl.com/letsencrypt-alternative/ https://zerossl.com/letsencrypt-alternative/
jakobmartz3 6y ago
only 3???
surround 6y ago
It says “no credit card required.” Can they stop people from making multiple accounts and getting unlimited certificates?
- gtirloni 6y ago
  Throttling
mholt 6y ago
Their pricing page is being revised. You get free unlimited certs through ACME, including wildcards. > In an effort to ensure the widest possible SSL certificate coverage around the world, our team has decided to keep all ZeroSSL certificates created using the ACME protocol completely free of charge. https://zerossl.com/features/acme/ https://zerossl.com/features/acme/
- da_big_ghey 6y ago
  Good to know, and I'm glad there's an alternative to Let's Encrypt, just in case. Is ZeroSSL trusted by old Android devices? If so, that might be a work-around for Let's Encrypt's cross-signing from IdenTrust expiring.
  - mholt 6y ago
    Yes as far as I know; their Sectigo/Comodo root is older. But, you can still use Let's Encrypt with old Android devices until the later part of 2021 using the alternate chain: https://letsencrypt.org/2020/11/06/own-two-feet.html https://letsencrypt.org/2020/11/06/own-two-feet.html (As a point of reference, Caddy supports configuring this alternate chain.)
    - stephenr 6y ago
      If zerossl is reselling/a subsidiary of sectigo, that’s enough reason to never use this. Sectigo is the new name for Comodo. The same bunch of pricks who tried to trademark “Let’s Encrypt”. Other players in the acme cert “business” is great. Renaming a slime ball name and carrying on like nothing happened is not ok.
      - pbronez 6y ago
        "If you can't beat 'em, join 'em"
  - calcifer 6y ago
    > Is ZeroSSL trusted by old Android devices? Yes. The intermediate certificate has been included since Android 6.0 [1] and the root expires in 2038 [2]. [1] https://android.googlesource.com/platform/system/ca-certificates/+/2a48c2679ecacd680ad757f3e1607683c9845ba0 https://android.googlesource.com/platform/system/ca-certific... [2] https://crt.sh/?id=1199354 https://crt.sh/?id=1199354

richardwhiuk 6y ago

Plus no wildcard support (which Let's Encrypt provides). They say "No REST API access" - but presumably ACME does work?

edoceo 6y ago
What! LE does wildcard now!? /me searches... https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578 https://community.letsencrypt.org/t/acme-v2-production-envir...
- zymhan 6y ago
  Oh yes, it's a lifesaver.
rohansingh 6y ago
Yeah, looks like ACME is indeed free and includes wildcards: https://zerossl.com/letsencrypt-alternative/ https://zerossl.com/letsencrypt-alternative/

jakobmartz3 6y ago

only 3???

surround 6y ago

It says “no credit card required.” Can they stop people from making multiple accounts and getting unlimited certificates?

gtirloni 6y ago
Throttling

mholt 6y ago

Their pricing page is being revised. You get free unlimited certs through ACME, including wildcards. > In an effort to ensure the widest possible SSL certificate coverage around the world, our team has decided to keep all ZeroSSL certificates created using the ACME protocol completely free of charge. https://zerossl.com/features/acme/ https://zerossl.com/features/acme/

da_big_ghey 6y ago
Good to know, and I'm glad there's an alternative to Let's Encrypt, just in case. Is ZeroSSL trusted by old Android devices? If so, that might be a work-around for Let's Encrypt's cross-signing from IdenTrust expiring.
- mholt 6y ago
  Yes as far as I know; their Sectigo/Comodo root is older. But, you can still use Let's Encrypt with old Android devices until the later part of 2021 using the alternate chain: https://letsencrypt.org/2020/11/06/own-two-feet.html https://letsencrypt.org/2020/11/06/own-two-feet.html (As a point of reference, Caddy supports configuring this alternate chain.)
  - stephenr 6y ago
    If zerossl is reselling/a subsidiary of sectigo, that’s enough reason to never use this. Sectigo is the new name for Comodo. The same bunch of pricks who tried to trademark “Let’s Encrypt”. Other players in the acme cert “business” is great. Renaming a slime ball name and carrying on like nothing happened is not ok.
    - pbronez 6y ago
      "If you can't beat 'em, join 'em"
- calcifer 6y ago
  > Is ZeroSSL trusted by old Android devices? Yes. The intermediate certificate has been included since Android 6.0 [1] and the root expires in 2038 [2]. [1] https://android.googlesource.com/platform/system/ca-certificates/+/2a48c2679ecacd680ad757f3e1607683c9845ba0 https://android.googlesource.com/platform/system/ca-certific... [2] https://crt.sh/?id=1199354 https://crt.sh/?id=1199354