Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Who do you recommend for SSL certs? Digicert, Verisign, someone else? I'd like someone with a trusted root certificate.

share|improve this question

closed as not constructive by Mark Henderson Jan 15 '12 at 5:37

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

add comment

9 Answers

I've used most of them and they mostly vary in service.

FWIW, RapidSSL has worked out fine for me.

share|improve this answer
    
FYI, it's not always advertised but Thwate is owned by Verisign. –  Jauder Ho Apr 30 '09 at 8:47
add comment

GoDaddy.com

For me they are local, but the biggest advantage is 24/7 phone support

and besides the wildcard cert for *.homeserver.com was issued by GoDaddy...how many people have that one loaded up?

share|improve this answer
add comment

The root certificate list has ballooned so large over the past few years that certificates signed by a "trusted" root authority are affordable and relatively easy to come by. I believe there are over 200 root authorities now, including everything from Verisign to the Hong Kong Post Office.

I've used GoDaddy in the past. Their certs are affordable and well recognized.

share|improve this answer
add comment

Thawte used them for years - they are absolutely the best out there. I only used one other (can't remember the name) because I needed a special type of certificate for an Exchange deployment that Thawte did not offer.

share|improve this answer
    
Thawte is also owned by Verisign, which should assuage any concerns about them as a CA. In rare circumstances I have encountered a situation where the Thawte CA was not trusted, but installation of their root certificate resolved that issue. –  Garthmeister J. Apr 30 '09 at 17:09
    
Most Thawte certificates now require a CA chaining certificate nowadays. This can be a challenge in mixed server-type environments. –  Joe Jun 20 '11 at 21:28
add comment

We use verisign here at the office.

share|improve this answer
add comment

I have started using DigiCert recently because they are cheap and their wildcard certificates (again cheap) work on multiple servers at no extra cost. They also have a nice reseller program.

share|improve this answer
1  
Their support is top-notch, as in after jumping online and chatting with them a couple times, I said "That's the kind of place I'd like to work." (No I don't work for them, or resell for them or anything.) Their wildcard cert is a particularly good value. –  Scandalon Aug 27 '10 at 18:27
    
+1 I am hearing them as a recommendation over Verisign more and more lately, mainly because of better pricing. However, GoDaddy is more popular because it is super-cheap, and Verisign is still considered the best-of-the-best, if you have the cash to spare. –  BlueRaja Jan 30 '12 at 18:28
add comment

I use two; instantssl for my mail server and geotrust (owned by versign) for a public facing site.

For a while instantssl required an intermediate certificate, and have managed to get their mail server blacklisted by sorbs for spamming, so I wouldn't recommend them.

share|improve this answer
add comment

At the office we use Entrust and it's been great. Their certificate management is extremely slick. I used to use Geotrust at an old job, before they were part of Verisign, and they were OK too.

share|improve this answer
add comment

I like GoDaddy, the process was quick and easy. They have good online documentation once you login. The price was right (mix in a discount from buying another product, or use the discount from buying this to renew a domain and things are even cheaper).

I just bought a domain and the certificate had two names in it, www.domainname.com and domainname.com for the price of one domain (no more need to buy two or use redirection).

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.