Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Who do you recommend for SSL certs? Digicert, Verisign, someone else? I'd like someone with a trusted root certificate.


locked by HopelessN00b Dec 3 '14 at 1:00

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as not constructive by Mark Henderson Jan 15 '12 at 5:37

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

For me they are local, but the biggest advantage is 24/7 phone support

and besides the wildcard cert for * was issued by many people have that one loaded up?


I have started using DigiCert recently because they are cheap and their wildcard certificates (again cheap) work on multiple servers at no extra cost. They also have a nice reseller program.

Their support is top-notch, as in after jumping online and chatting with them a couple times, I said "That's the kind of place I'd like to work." (No I don't work for them, or resell for them or anything.) Their wildcard cert is a particularly good value. – Scandalon Aug 27 '10 at 18:27
+1 I am hearing them as a recommendation over Verisign more and more lately, mainly because of better pricing. However, GoDaddy is more popular because it is super-cheap, and Verisign is still considered the best-of-the-best, if you have the cash to spare. – BlueRaja Jan 30 '12 at 18:28

Thawte used them for years - they are absolutely the best out there. I only used one other (can't remember the name) because I needed a special type of certificate for an Exchange deployment that Thawte did not offer.

Thawte is also owned by Verisign, which should assuage any concerns about them as a CA. In rare circumstances I have encountered a situation where the Thawte CA was not trusted, but installation of their root certificate resolved that issue. – Garthmeister J. Apr 30 '09 at 17:09
Most Thawte certificates now require a CA chaining certificate nowadays. This can be a challenge in mixed server-type environments. – Joe Jun 20 '11 at 21:28

I've used most of them and they mostly vary in service.

FWIW, RapidSSL has worked out fine for me.

FYI, it's not always advertised but Thwate is owned by Verisign. – Jauder Ho Apr 30 '09 at 8:47

The root certificate list has ballooned so large over the past few years that certificates signed by a "trusted" root authority are affordable and relatively easy to come by. I believe there are over 200 root authorities now, including everything from Verisign to the Hong Kong Post Office.

I've used GoDaddy in the past. Their certs are affordable and well recognized.


We use verisign here at the office.


I use two; instantssl for my mail server and geotrust (owned by versign) for a public facing site.

For a while instantssl required an intermediate certificate, and have managed to get their mail server blacklisted by sorbs for spamming, so I wouldn't recommend them.


At the office we use Entrust and it's been great. Their certificate management is extremely slick. I used to use Geotrust at an old job, before they were part of Verisign, and they were OK too.


I like GoDaddy, the process was quick and easy. They have good online documentation once you login. The price was right (mix in a discount from buying another product, or use the discount from buying this to renew a domain and things are even cheaper).

I just bought a domain and the certificate had two names in it, and for the price of one domain (no more need to buy two or use redirection).


Not the answer you're looking for? Browse other questions tagged or ask your own question.