6 ms·

Any recommendations on where to buy a good ssl certificate?

chappi42 15y ago
gandi.net if you register the domain with them, a standard ssl cert is included. Not sure if they issue certificates if the domain is somwhere else.
- forcer 15y ago
  DigiCert. I am currently going through the EV validation process with them and they are absolutely briliant. Very quick customer service (including online chat), well designed and easy to use website, good prices. What's more to ask?
dpapathanasiou 15y ago
This advice from mdasen last year helped me (I wouldn't have known about the cheaper pricing through resellers otherwise): http://news.ycombinator.com/item?id=1318340 http://news.ycombinator.com/item?id=1318340
colinprince 15y ago
For a free cert check out: https://github.com/ioerror/duraconf/blob/master/startssl/README.markdown https://github.com/ioerror/duraconf/blob/master/startssl/REA...
pja 15y ago
http://www.startssl.com/ http://www.startssl.com/ will give you a free ssl certificate for a single domain (actually, they'll give you one that covers a domain plus a single subdomain). Handy if you want to setup your own mailserver somewhere: the root certs are in all the main browsers & mail clients. You'll need to have your (web|mail)server serve up the intermediate cert as well as the leaf cert which can be a slight pain to setup, but apart from that it all works just fine.
- qjz 15y ago
  The root cert is not in early versions of Android, due to a bug. I'm not sure when that was fixed. Unfortunately, you can't update root certificates in these versions.
  - pja 15y ago
    Are there any phones out there that can't be at least updated to Froyo now, whether officially or not? If you're geeky enough to want your own ssl cert then you're geeky enough to root your phone & install CyanogenMod.
    - qjz 15y ago
      I can't update my users' phones for them. Just pointing out that users stuck on older versions of Android, for whatever reason, may run into problems with the free cert. In the mail client, it will work if "TLS (if available)" is checked, but that's a departure from what other mail clients mean by that option.
      - pja 15y ago
        If you check that then won't those users using an unencrypted connection?
kels 15y ago
I work at a data center/hosting company and I can give you an AlphaSSL cert for $12.99 here just use the promo code "HACKERNEWS": https://secure.springshosting.net/cart.php?a=add&pid=57 https://secure.springshosting.net/cart.php?a=add&pid=57
randomstring 15y ago
Digicert https://www.digicert.com/ https://www.digicert.com/
backwardsk 15y ago
The website http://www.sslcertificatereviews.net/ http://www.sslcertificatereviews.net/ lists the prices of the different certificate authority's SSLs. Plus there's coupons on the site too. Looks like a good place to do some SSL homework.

gandi.net if you register the domain with them, a standard ssl cert is included. Not sure if they issue certificates if the domain is somwhere else.

forcer 15y ago
DigiCert. I am currently going through the EV validation process with them and they are absolutely briliant. Very quick customer service (including online chat), well designed and easy to use website, good prices. What's more to ask?

dpapathanasiou 15y ago

This advice from mdasen last year helped me (I wouldn't have known about the cheaper pricing through resellers otherwise): http://news.ycombinator.com/item?id=1318340 http://news.ycombinator.com/item?id=1318340

colinprince 15y ago

For a free cert check out: https://github.com/ioerror/duraconf/blob/master/startssl/README.markdown https://github.com/ioerror/duraconf/blob/master/startssl/REA...

pja 15y ago

http://www.startssl.com/ http://www.startssl.com/ will give you a free ssl certificate for a single domain (actually, they'll give you one that covers a domain plus a single subdomain). Handy if you want to setup your own mailserver somewhere: the root certs are in all the main browsers & mail clients. You'll need to have your (web|mail)server serve up the intermediate cert as well as the leaf cert which can be a slight pain to setup, but apart from that it all works just fine.

qjz 15y ago
The root cert is not in early versions of Android, due to a bug. I'm not sure when that was fixed. Unfortunately, you can't update root certificates in these versions.
- pja 15y ago
  Are there any phones out there that can't be at least updated to Froyo now, whether officially or not? If you're geeky enough to want your own ssl cert then you're geeky enough to root your phone & install CyanogenMod.
  - qjz 15y ago
    I can't update my users' phones for them. Just pointing out that users stuck on older versions of Android, for whatever reason, may run into problems with the free cert. In the mail client, it will work if "TLS (if available)" is checked, but that's a departure from what other mail clients mean by that option.
    - pja 15y ago
      If you check that then won't those users using an unencrypted connection?

kels 15y ago

I work at a data center/hosting company and I can give you an AlphaSSL cert for $12.99 here just use the promo code "HACKERNEWS": https://secure.springshosting.net/cart.php?a=add&pid=57 https://secure.springshosting.net/cart.php?a=add&pid=57

randomstring 15y ago

Digicert https://www.digicert.com/ https://www.digicert.com/

backwardsk 15y ago

The website http://www.sslcertificatereviews.net/ http://www.sslcertificatereviews.net/ lists the prices of the different certificate authority's SSLs. Plus there's coupons on the site too. Looks like a good place to do some SSL homework.