Which CA shop provides a product that allows you to sign your own SSL certificates? (say named to a sub-domain) Are there any viable alternatives?
We are deploying a product with a secure web interface to a sizeable number of installations at various clients' locations. Client users will be accessing their portals from any normal web browser. Since replacing/renewing these certificates in the filed is not feasible, long expiry dates of decade or longer is ideal.
Possible options (and cons):
- Use self signed certificates (users will see a browser error/warning) - Use Wild-card or maybe multi-cn certificates. (less secure since the PK is shared between non-trusting clients) - Become a chained certificate authority and sign certificates (expensive) - buy individual/bulk certificates for every installation (expensive, and cumbersome)