3 ms·

Keep in mind that Gandi includes 1 free SSL cert with every domain name. Per year.

jc4p 15y ago
I'm actually shocked at how many places accept the trust chain of my free SSL certificate from Gandi. Some browsers refuse my company's very expensive wildcard certificate from GoDaddy saying it's not trusted but trust mine from Gandi!
- huhtenberg 15y ago
  Their certs are issued by Comodo, which is a well established CA. And they are hardly free, their price is simply rolled into the domain registration fee.
  - woodson 15y ago
    They may be well established, but remember ComodoGate [1,2]. [1] https://en.wikipedia.org/wiki/Comodo_Group#Breach_of_security https://en.wikipedia.org/wiki/Comodo_Group#Breach_of_securit... [2] http://www.securelist.com/en/blog/6177/A_Web_of_Mis_Trust_Comodogate_Part_II http://www.securelist.com/en/blog/6177/A_Web_of_Mis_Trust_Co...
- lmz 15y ago
  Did you configure the server to send the intermediate certificates for your GoDaddy wildcard certificate? I've experienced similar problems in the past, but sending the intermediate certificate fixed it.
  - yuhong 15y ago
    Yea, when you install any SSL certificate, don't forget the intermediate certs!
andyking 15y ago
I'm with Gandi and didn't actually realise I already had this facility under my nose. Thanks for the information!
- FuzzyDunlop 15y ago
  I only recently bought a domain with Gandi after seeing it mentioned here. This feature has just convinced me to stick with them for future purchases.
Macha 15y ago
Only with the first year, if I'm reading their site right? > With each domain name transferred to Gandi, we include a Standard SSL certificate for free the first year. https://www.gandi.net/domain/ssl#nav https://www.gandi.net/domain/ssl#nav
- jklp 15y ago
  Yep, I thought it was perpetually though after my first year they started charging me for it.
- huhtenberg 15y ago
  Uhm. It is ambiguously worded, that's for sure - Included for free the first year with the purchase, transfer, or renewal of your domain name. My understanding was that if I had a domain with them and renewed for another year, that would fall under the "renewal" clause of the above.

jc4p 15y ago

I'm actually shocked at how many places accept the trust chain of my free SSL certificate from Gandi. Some browsers refuse my company's very expensive wildcard certificate from GoDaddy saying it's not trusted but trust mine from Gandi!

huhtenberg 15y ago
Their certs are issued by Comodo, which is a well established CA. And they are hardly free, their price is simply rolled into the domain registration fee.
- woodson 15y ago
  They may be well established, but remember ComodoGate [1,2]. [1] https://en.wikipedia.org/wiki/Comodo_Group#Breach_of_security https://en.wikipedia.org/wiki/Comodo_Group#Breach_of_securit... [2] http://www.securelist.com/en/blog/6177/A_Web_of_Mis_Trust_Comodogate_Part_II http://www.securelist.com/en/blog/6177/A_Web_of_Mis_Trust_Co...
lmz 15y ago
Did you configure the server to send the intermediate certificates for your GoDaddy wildcard certificate? I've experienced similar problems in the past, but sending the intermediate certificate fixed it.
- yuhong 15y ago
  Yea, when you install any SSL certificate, don't forget the intermediate certs!

andyking 15y ago

I'm with Gandi and didn't actually realise I already had this facility under my nose. Thanks for the information!

FuzzyDunlop 15y ago
I only recently bought a domain with Gandi after seeing it mentioned here. This feature has just convinced me to stick with them for future purchases.

Macha 15y ago

Only with the first year, if I'm reading their site right? > With each domain name transferred to Gandi, we include a Standard SSL certificate for free the first year. https://www.gandi.net/domain/ssl#nav https://www.gandi.net/domain/ssl#nav

jklp 15y ago
Yep, I thought it was perpetually though after my first year they started charging me for it.
huhtenberg 15y ago
Uhm. It is ambiguously worded, that's for sure - Included for free the first year with the purchase, transfer, or renewal of your domain name. My understanding was that if I had a domain with them and renewed for another year, that would fall under the "renewal" clause of the above.