Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If I sign someone else's server certificate will it allow them to avoid the whole "untrusted certificate" thing that browsers give when you use a self signed cert?

share|improve this question
up vote 10 down vote accepted


The only way you can avoid that is by purchasing a certificate from a CA (Certificate Authority) whos "Root Certificate" has been installed in the browser/OS/device they are using, OR, to install the Self-Signed certificate onto the browser/OS/device.

There are dozens of trusted CAs to choose from, and some of them can be quite cheap. I recommend, 10 bucks and away you go.

share|improve this answer
StartSSL has a free certificate product. You can view their offerings below. I've used them in the past with little issue. ipsCA is another certificate authority with relatively cheap certificates. If you are an .edu domain you can get a free cert valid for 2 years. The problem I have with ipsCA is that their root certificate is not distributed widely enough or in a timely manner (they just renewed their intermediate certificate which currently only works with Internet Explorer). If you need to be sure it is recognized in as many browsers as possible then – J.Zimmerman Jan 4 '10 at 9:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.