Web Hosting Talk







View Full Version : Need recommendations for a SSL cert


goacom
04-24-2002, 02:49 PM
Hi folks,
I am considering versign and thwate 128 bit certs. Any other recommendations?
Thanks.

okihost
04-24-2002, 02:54 PM
I was also looking for one a while back.. There is one called geotrust you might want to check out they might be a little cheaper.

avara
04-24-2002, 03:56 PM
Also check out www.ssl4less.com

StarGate
04-24-2002, 10:05 PM
... AND good prices check out GlobalSign.net
check my site www.stargate.hm for the GlobalSign logo; click on it to see what you get. My SSL page is https://www.stargate.hm

They rock!

chrisb
04-25-2002, 05:36 AM
As I stated in another thread, Geotrust doesn't work on my browser. I'd go with Thawte, it's the cheapest most-compatible one, in my opinion.

bobcares
04-25-2002, 06:38 AM
HI!
Thawte is really cool. Very good support too.... :)
Have a great day :)

regards
amar

avara
04-25-2002, 07:34 AM
Originally posted by chrisb
As I stated in another thread, Geotrust doesn't work on my browser. I'd go with Thawte, it's the cheapest most-compatible one, in my opinion.

I assume that's their QuickSSL cert which doesn't work on your browser? They also have a different cert which has the same level of browser compatibility as Thawte. That's the one you can buy at www.ssl4less.com

TMX
04-25-2002, 10:24 AM
Originally posted by goacom
Hi folks,
I am considering versign and thwate 128 bit certs. Any other recommendations?
Thanks.

GeoTrust from ssl4less.com, there is no other. They have the 128-bit cert and the Geotrust TrueSite ID for 99 bucks, and Tracy Phillips, the man behind ssl4less, is one of the most helpful, accomodating individuals I've had the pleasure of doing business with in a very long time.

As for Verisign, I personally wouldn't do business with them under any circumstances, due to their little ongiong domain renewal scam.

-Bob

chrisb
04-25-2002, 02:58 PM
Originally posted by avara


I assume that's their QuickSSL cert which doesn't work on your browser? They also have a different cert which has the same level of browser compatibility as Thawte. That's the one you can buy at www.ssl4less.com

Got a URL for one of those that I can try?

BTW, https://www.stargate.hm doesn't work for me. My browser says "cannot establish secure communicatons".

GnomeyNewt
04-25-2002, 03:11 PM
Originally posted by chrisb
As I stated in another thread, Geotrust doesn't work on my browser. I'd go with Thawte, it's the cheapest most-compatible one, in my opinion.

I agree with chrisb. Thawte is a reliable cert company.

You must remember that certificates are not just to secure the transaction, but to also identify the company as being who they say they are! Thawte goes through a process to verify each business/individual that they assign certs to. So does Verisign and that is why they have such good reputations when people are signing up for certs and with visitors to websites that have those certificates.

I do not know much about the new certificates, but if they are good than over time they will build up the same trust status as the older companies. :)

TMX
04-25-2002, 04:06 PM
Originally posted by chrisb


Got a URL for one of those that I can try?



https://tmxnet.com/logo.jpg

It's not anything requiring a secure connection, but it will let you test the cert.

-Bob

eHostPros
04-25-2002, 05:26 PM
Hi,

We get ours at : SSL Site (http://www.ebizid.com)

http://www.ebizid.com

Nice support and they are partners with geotrust. So their cert's are also 128bit quickSSL , they get real cheap deal from geotrust.

Cheers

-Rupi

chrisb
04-26-2002, 12:01 AM
Originally posted by TMX


https://tmxnet.com/logo.jpg

It's not anything requiring a secure connection, but it will let you test the cert.

-Bob

Thanks Bob. That secure URL works on my browser and it says issued by Equifax Secure. It must just be the QuickSSL ones' that don't work for me. What is the difference between them?

chrisb
04-26-2002, 12:18 AM
Originally posted by avara

I assume that's their QuickSSL cert which doesn't work on your browser? They also have a different cert which has the same level of browser compatibility as Thawte. That's the one you can buy at www.ssl4less.com

ssl4less.com has a PO box in Cookeville, TN, an office in Boulder, CO but they don't give the address, and TrueSite says they are registered in CA. All of this sends up a red flag to me. I'm not saying they are not alright... I'm saying it looks fishy... that's all.

thinkcomp
04-26-2002, 11:37 AM
GeoTrust's prices for both QuickSSL and eBusiness ID are extremely competitive, so they've separated the SSL certificate into two separate products, hoping that you'll go for the more expensive one. The only difference is that eBusiness ID certifiies that your organization is who you say it is, while QuickSSL only certifies that your domain name is actually trustworthy. Most other companies' SSL certificates work like eBusiness ID, stating the actual name of the organization on the certificate. (If you look at a QuickSSL certificate, only the domain name will be displayed.)

We should have some more information on GeoTrust SSL shortly...

hitspot
04-26-2002, 11:50 AM
I would highly recommend ssl4less.com as well.

.::DefCon::.
04-26-2002, 01:49 PM
Guys,

anyone ever heard of www.InstantSSL.com ? :confused:
Because they are CHEAP !! :eek:
49$/yr for a 128bit certificate?? WOW!

Any comments?

chrisb
04-26-2002, 03:15 PM
Originally posted by .::DefCon::.
Guys,

anyone ever heard of www.InstantSSL.com ? :confused:
Because they are CHEAP !! :eek:
49$/yr for a 128bit certificate?? WOW!

Any comments?

Thanks for posting that, and the comodo one for $49 works on my browser. SecureLook ($79) also works on my browser. I don't believe Geo eBusiness and QuickSSL are identical though, because some Geo certificates work on my browser and some don't. For example, OLM.net uses Geo and theirs doesn't work on my browser. I asked them to change their certificate; but I doubt they will since their Geo certificate is bought thru 2018.

PlanetDigita
04-26-2002, 05:51 PM
WOW. Glad I did a search for SSL4less today.

To answer some questions.

I need to get a new certificate for SSL4Less.com as it has Stephan Bradley's (Host Velocity) old address on the cert. You guys are pretty good detectives, I sell certs to huge corporations that have not noticed.

The differance between a QuickSSL and True BusinessID

1. QuickSSL - No authentication of the business is done. GeoTrust just makes sure the person they are issuing the SSL certificate to is the person who is on the WHOIS query. Does not include a verification icon (True Site Smart Icon). I think this was mentioned earlier, the QuickSSL will have the URL of the site on the certificate where the Orginization information is on the Certificate, no matter what you put on your CSR, GeoTrust will change it to the URL.

2. True BusinessID - GeoTrust verifies that the business in question belongs to both the person in the CSR and WHOIS record (some people have a tought time proving who they are believe it or not) and includes a verification icon.

3. The certificate from InstanSSL is from a company called Commodo and it has a CA certificate about 3 levels down (I am checking into them). One of the problems that I have with them, well there are quite a few, is that they use a cert from Thawte on their own servers, which makes no sense to me. The other problem would be purley from a support perspective (which again would not affect any of the tech types here), is that you have (my memory is fading) either 4 or 5 different certificates to install to get the SSL Certificate to work correctley.

Like I said their Certificate Authority seems to be way down the line somewhere.

You have to admit they are way cheap.

Well enough rambling for now.

Happy Hosting,

Tracy Phillips
SSL4Less

nox
04-26-2002, 10:22 PM
Originally posted by littlest


I agree with chrisb. Thawte is a reliable cert company.

You must remember that certificates are not just to secure the transaction, but to also identify the company as being who they say they are! Thawte goes through a process to verify each business/individual that they assign certs to. So does Verisign and that is why they have such good reputations when people are signing up for certs and with visitors to websites that have those certificates.

I do not know much about the new certificates, but if they are good than over time they will build up the same trust status as the older companies. :)

Geotrust took over the Equifax SSL business, but the CA is still Equifax..

Equifax is actually a very old and trusted company and was dealing in security and financial matters before Thawte or Verisign were even thought of..

Geotrust are trying to expand the product range and make SSL affordable, and are doing a great job so far...

Verisign charge way too much for these and they are no different from the full blown Equifax BusinessID certs, other than possibly having a brand name that is more widely recognised by the average surfer..

If you want to confirm the identity of the cert holder, then Equifax and True Site combination do it just as well as Verisign [who also own Thawte]

The QuickSSL works on about 92%+ of all browsers [not some of the older ones] and the Equifax ID on 98%+ and these figures can be checked at the relevant web sites, might even be higher now.

So work out whether you just want a secure connection or to also verify the domain/site owners.. these are two totally different things.. you can make your own self signed cert which will encrypt the data same as a $300 cert... but this is no good for ecommerce because it doesn't verify the site/domain owner...

Tracy might be kind enough to let us know the outcome of his 'checking into' some of those other CA's..

If people are having trouble with certain browsers and SSL certs it would be great to know what browsers and certs, just to keep tabs on what is working and what is not...

nmihosting
04-27-2002, 04:45 PM
We have been using Thawte for a few years and resell their certs. But the other day a customer of ours bought a GeoTrust QuickSSL cert and I was impressed with the speed and ease he was able to accomplish this with.

I read over what GeoTrust had to say about SSL being seperate from Business verification and I have to say that the make a good case.

Their QuickSSL is certainly a good solution - althought their TrueSite cert which also includes business verification is probably a better option for proper e-commerce sites.

We are going to use their QuickSSL for securing things like our control panels which we want to be secure, but don't take payment details via.

akaize
04-28-2002, 07:25 AM
InstantSSL !

How is it?

LinuXpert
04-28-2002, 11:15 AM
Originally posted by akaize
InstantSSL !

How is it?
Read this thread: http://www.webhostingtalk.com/showthread.php?s=&threadid=46872

webarama
04-28-2002, 11:32 AM
Originally posted by hitspot
I would highly recommend ssl4less.com as well.

Me too! I bought two certs from them last month, got them both approved and delivered from GeoTrust within 24 hours.

I have previously bought from Thawte and through OpenSRS, neither have ever delivered quicker than 1 week, so 24 hours was a great result I thought.

Noldar
04-28-2002, 11:40 AM
I can also recommend SSL4Less. I purchased a GeoTrust cert from Tracy last month and it was delivered very quickly. I also had a question about moving my cert to another server and Tracy was very helpful in answering my questions.

Richard