up vote 6 down vote favorite
4
share [g+] share [fb]

Is it possible to get a trusted signed ssl certificate for free?

I could create a self signed one using iis7 for example but these normally require the user to accept them as compared to one from a trusted source.

Therefore, is there a very inexpensive way to get one (free?) as cost is definitely an issue.

link|improve this question
64% accept rate
Not that it should really matter but its for windows server 2008 r2 – asn187 Jan 11 '10 at 21:51
Popular browser recognition is key. – asn187 Jan 11 '10 at 22:01
1  
You could ask nicely for an diginotar certificate from an "Iranian" hacker :P (lets be honest here, SSL security is a huge joke...) – Silverfire Sep 16 '11 at 6:28
feedback

closed as not constructive by MDMarra, Shane Madden, WesleyDavid, Chris S♦ Jan 26 at 4:09

This question is not a good fit to our Q&A format. We expect answers to generally involve facts, references, or specific expertise; this question will likely solicit opinion, debate, arguments, polling, or extended discussion. See the FAQ for guidance on how to improve it.

7 Answers

up vote 3 down vote

You should look at : http://www.cacert.org/ It's Free and well recognized by Unix OS. I think it's what you are looking for.

link|improve this answer
2  
From windows, using all browsers, the certificate used on their own website cacert.org/index.php?id=1 is untrusted. Google Chrome big red scary page. That doesn't look so good. – asn187 Jan 11 '10 at 21:55
They are free and trustworthy, but their root certificate is not included in the 'trusted roots' lists of most browsers yet. This is sadly mostly a question of money. CAcert.org is working on passing an audit, the most important step to becoming included in browsers. Many Linux distributions already include the root certificate by default, but the huge Windows market is still out of reach. In any case, they're not 'trusted' yet in the way @asn187 asked. – Martijn Heemels Jan 25 at 23:10
feedback
up vote 3 down vote

Arstechnica had a nice little article on How to obtain and install an SSL/TLS certificate, for free http://arstechnica.com/security/news/2009/12/how-to-get-set-with-a-secure-sertificate-for-free.ars

link|improve this answer
1  
As far as I can tell this is not free or even inexpensive. The cost is around $150 for the need I describe. – asn187 Jan 12 '10 at 11:26
You can get a class 1 certificate for free. Anything above a class 1 will cost money. I have used this ona couple domains for the plesk control panel. – aduljr Jan 19 '10 at 18:11
feedback
up vote 2 down vote

there are free trial [ 30 days ] certs - it's very handy for testing.

but for production use - i suggest use buy something. cheapest i've bought were from namecheap - 10usd/year.

link|improve this answer
Yeah, namecheap are the cheapest single root certs I've found. – TRS-80 Jan 12 '10 at 2:11
feedback
up vote 2 down vote

Have a look at Startcom. Free and the root is in most major browser/os's but there are some caveats such as having to re-register/renew every few months.

Tbh whilst I take the point about cost being an issue, for $10 just get a rapidssl from namecheap.com - job done.

link|improve this answer
Exactly, startssl.com worked great for me. Class 1 is free and easy to get. The lifetime of the cert is 1 or 2 years so that's not an issue. Your validation lasts only 30 days though, which means you'll have to prove your identity or ownership of your domain quite often when interacting with them. Doesn't mean the cert will expire after 30 days though! I second the namecheap.com recommendation though. Cheap enough. – Martijn Heemels Jan 25 at 23:15
I've been using StartCom for 3 years now and they rock. Can't go wrong with them and their certs being free for an year. Also, the owner of the company still runs most of it and detected recent attacks himself! – Nasko Jan 26 at 0:48
feedback
up vote 1 down vote

GoDaddy has cheap SSL certificates.

http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo002a

link|improve this answer
feedback
up vote 1 down vote

I've bought mine from www.cheapssls.com - $US10/year

link|improve this answer
1  
The link you probably meant was - cheapssls.com – asn187 Jan 11 '10 at 21:58
Whoops, you're right. Thanks Zoredache. – Mark Henderson♦ Jan 12 '10 at 2:06
feedback
up vote 0 down vote

Namecheap.com was our initial low cost SSL supplier (US$ 10/year). Now bought a PositiveSSL cert from https://comodosslstore.com/ at US$ 6.50/year when buying for 5 years. The 5 years is beneficial to us. Now we only need to execute the renew process once every five years. Note: the optional free upgrade to EV is a separate cert with a validness of only 1 year (not 5).

link|improve this answer
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.