5 ms·

The best (in terms of browser compatibility) cheap cert that Namecheap sell is the RapidSSL cert at http://www.namecheap.com/ssl-certificates/geotrust-ssl-certi

The best (in terms of browser compatibility) cheap cert that Namecheap sell is the RapidSSL cert at http://www.namecheap.com/ssl-certificates/geotrust-ssl-certificates.aspx http://www.namecheap.com/ssl-certificates/geotrust-ssl-certi...

moe 15y ago
Be aware though that GeoTrust and Thawte certs don't work[1] on android devices. There are claims that it can be fixed by adding a cross-root cert[2] but for me that didn't work out. More generally: If you need to support mobile devices then read your CA's compatibility list closely (if you can find it...) and test, test, test. You'd think this shouldn't be an issue anymore in 2012, but it sadly still is. [1] http://www.zimbra.com/forums/administrators/44675-new-geotrust-ssl-certificates-android-users.html http://www.zimbra.com/forums/administrators/44675-new-geotru... [2] https://support.servertastic.com/entries/426677-rapidssl-and-geotrust-certificate-not-trusted-on-mobile-device https://support.servertastic.com/entries/426677-rapidssl-and...
- yuhong 15y ago
  More precisely, older Android devices.
  - moe 15y ago
    Not really. We've had the issues on Froyo devices, too...
    - yuhong 15y ago
      I read it is pre-2.3 devices.
      - xxqs 15y ago
        on my 2.3 android phone, I have this problem with a Comodo cheap certificate
        xxqs 15y ago
        actually fixed it now by installing the intermediate certificate chain
- foobarbazetc 15y ago
  Sigh. I spent way too much time picking these particular certs and they've gone and messed it up. :) The cross-root cert should work, but you need to make sure it's presented in the right order, I think. FWIW, my latest RapidSSL-through-Namecheap certs were issued by: issuer=/C=US/O=Equifax/OU=Equifax Secure Certificate Authority And that's the "good"/trusted CA. I'm not sure when they made the switch, but I only got this cert issued a couple of months ago. FWIW, we also support Docomo phones, and that is a huge pain in the ass. The only CA that works there is: i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority If you don't need to support really old mobile devices, the best certs going are, IMHO, Digicert. They get chained all the way back to Entrust: 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV CA-1 i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA 2 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA i:/C=US/O=Entrust.net/OU=www.entrust.net/CPS incorp. by ref. (limits liab.)/OU=(c) 1999 Entrust.net Limited/CN=Entrust.net Secure Server Certification Authority And the company has some of the best customer service going anywhere.
  - chrisbolt 15y ago
    If you don't need to support really old mobile devices, the best certs going are, IMHO, Digicert. They get chained all the way back to Entrust: Not only that, they check your installed cert after you buy it and email you if you installed it incorrectly: http://www.digicert.com/help/ http://www.digicert.com/help/
    - pja 15y ago
      So does StartSSL.
  - yuhong 15y ago
    This sites checks for SSL issues, including cert-related issues: https://www.ssllabs.com/ssldb/index.html https://www.ssllabs.com/ssldb/index.html

moe 15y ago

Be aware though that GeoTrust and Thawte certs don't work[1] on android devices. There are claims that it can be fixed by adding a cross-root cert[2] but for me that didn't work out. More generally: If you need to support mobile devices then read your CA's compatibility list closely (if you can find it...) and test, test, test. You'd think this shouldn't be an issue anymore in 2012, but it sadly still is. [1] http://www.zimbra.com/forums/administrators/44675-new-geotrust-ssl-certificates-android-users.html http://www.zimbra.com/forums/administrators/44675-new-geotru... [2] https://support.servertastic.com/entries/426677-rapidssl-and-geotrust-certificate-not-trusted-on-mobile-device https://support.servertastic.com/entries/426677-rapidssl-and...

yuhong 15y ago
More precisely, older Android devices.
- moe 15y ago
  Not really. We've had the issues on Froyo devices, too...
  - yuhong 15y ago
    I read it is pre-2.3 devices.
    - xxqs 15y ago
      on my 2.3 android phone, I have this problem with a Comodo cheap certificate
      - xxqs 15y ago
        actually fixed it now by installing the intermediate certificate chain
foobarbazetc 15y ago
Sigh. I spent way too much time picking these particular certs and they've gone and messed it up. :) The cross-root cert should work, but you need to make sure it's presented in the right order, I think. FWIW, my latest RapidSSL-through-Namecheap certs were issued by: issuer=/C=US/O=Equifax/OU=Equifax Secure Certificate Authority And that's the "good"/trusted CA. I'm not sure when they made the switch, but I only got this cert issued a couple of months ago. FWIW, we also support Docomo phones, and that is a huge pain in the ass. The only CA that works there is: i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority If you don't need to support really old mobile devices, the best certs going are, IMHO, Digicert. They get chained all the way back to Entrust: 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV CA-1 i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA 2 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA i:/C=US/O=Entrust.net/OU=www.entrust.net/CPS incorp. by ref. (limits liab.)/OU=(c) 1999 Entrust.net Limited/CN=Entrust.net Secure Server Certification Authority And the company has some of the best customer service going anywhere.
- chrisbolt 15y ago
  If you don't need to support really old mobile devices, the best certs going are, IMHO, Digicert. They get chained all the way back to Entrust: Not only that, they check your installed cert after you buy it and email you if you installed it incorrectly: http://www.digicert.com/help/ http://www.digicert.com/help/
  - pja 15y ago
    So does StartSSL.
- yuhong 15y ago
  This sites checks for SSL issues, including cert-related issues: https://www.ssllabs.com/ssldb/index.html https://www.ssllabs.com/ssldb/index.html