3 ms·
Going to be interesting how they've solved this - my guess is an intermediary cert they've obtained. Must be pretty recent though, as it's not in my intermediar
by iancarroll 12y ago
Going to be interesting how they've solved this - my guess is an intermediary cert they've obtained. Must be pretty recent though, as it's not in my intermediary database[0].
GlobalSign also has an unlimited SSL cert offering, but it doesn't come with SANs (they could have arranged something though).
0: https://github.com/iangcarroll/ca-intermediaries https://github.com/iangcarroll/ca-intermediaries
- timdorr 12y agoThey could be partnering with a root or intermediate CA for generation. But I don't see why they wouldn't get their own intermediate CA cert.
- iancarroll 12y agoIf they created their own root instead of partnering with another CA, which is what I assume you meant, then they would need a lot of time (2 yrs just to be included in apple+msft+mozilla) and the process would be public. An intermediary created by a partner would solve the problem but would require a partnership.
- innocenat 12y agoThey offers SSL with CloudFlare-issued cert for non-free plan already. I assume they use the old method of obtaining cert. Also, I think at their scale they can get special plan from CA.
- iancarroll 12y agoThey pay GlobalSign roughly $4000 (most are 3 yrs in length, that's for all three), which is only used to power SSL for about twenty domains (this obviously varies but it's what I've seen before, and it should be able to support 50 or 100 total domains). Free SSL would not be practical with their old method.
- innocenat 12y agoNo offence, but considering that their Pro plan which include SSL starts at $20 for first, and $5 for the rest per account. At 50*$20 it's only $1000. That doesn't sound right.
- iancarroll 12y agoIt's a yearly fee! :) Also updated my comment with a better estimate of the pricing (we've talked w/ GlobalSign about this before actually)