views:

1834

answers:

15

I'm looking for cheap SSL certs for running a personal website over https without triggering Firefox's "you may be facing a man-in-the-middle-attack" response that self signed certs provoke. Nothing particularly fancy, no EV, etc. Any recommendations/where do you get your certificates from?

A: 

Thawte.com usually is the cheapest.

Chris Lively
+12  A: 

Godaddy issues certificates pretty cheaply.

Edit - A little more info - $30/year to get a web server SSL certificate from GoDaddy. I don't think they do as rigorous verification as the older cert authorities (but that's why you buy an EV cert if you're a bank), but the really do a good job and have good customer service. I find their ads insulting, but they do their job well.

Neall
+1  A: 

If you aren't hosting yourself, I would check your host as well as the other suggestions. I was told that sometimes, hosts give you a discount on their normal price for certificates if you both buy the cert from them and host through them, but I've never needed one, so I never looked myself.

Thomas Owens
A: 

Sign up as a reseller with resellone.net, and you can buy certs for as little as $10. You do need to pay a $99 setup fee to become a reseller, and you must have "Verified by Visa" or "Mastercard securecode" to make credit card payments.

Jeremy
+1  A: 

Free one month or $79 for the year.
http://www.rapidssl.com/index_ssl.htm.

You can reissue monthly forever for free, it's just annoying.

jms
+9  A: 

At StartCom you can get free SSL certificates, that are signed by a certificate which is installed with Firefox 3 automatically if I am correct.

They are only valid one month though, so you have to renew them (for free) each month.

Check out http://cert.startcom.org/

Javache
The certificates are valid for 1 year, not 1 month.
cjm
It doesn't work with IE and Opera, but works with FF3.5, just need to add intermediate CA certificate on server side http://www.startssl.com/?app=21
agsamek
Looks like Microsoft is going to add StarCom's root certificate to Windows 7, Vista and XP via a root certificates update. See this link: http://www.istartedsomething.com/20091010/microsoft-free-root-certificate-authority-windows/
kpax
I just noticed something funny about their site. In the upper left-hand corner, there are four flags. United States, France, Germany, and Spain for English, French, German, and Spanish. So what flag do I click if I'm British?
User1
Just to follow up kpax comment, the StartCom root cert is on my machine as of May 2010. P.S. Great point to make.
Luke Puplett
A: 

We've been buying from Comodo (http://www.instantssl.com) for a number of years without any problems. $99 for one year. $65/year for a five year certificate.

Robin M
A: 

I always use https://www.digitaltcertifikat.dk/en/ which is a geotrust thing. 750DKK = 150USD

svrist
A: 

You can get a RapidSSL SingleHost certificate from a reseller for 27 Euro ($40) for the year.

Like the GoDaddy Standard SSL certificate, it does Domain-only validation, i.e. the certificate only certifies the domain name and nothing more. Most important, the certificate won't contain information about the organization the certificate belongs to, since this kind of information can't be validated by the e-mail validation process used for these cheap certificates.

But, these certificates (signed by Equfax Secure Inc.) will be accepted without warning by all popular browsers, contrary to self-signed certificates.

flight
+6  A: 

StartCom offers free SSL certificates that work fine with Firefox 3. They're valid for 1 year (not 1 month). You do have to be using your own domain; you can't use a subdomain of somebody else (e.g. a dynamic DNS provider).

cjm
Note however that MS Internet Explorer does come with the StartCom root cert installed, so for IE users it will be like a self-signed cert (unless you can arrange for the StartCom cert to be installed in every browser, such as in a corporate setting).
sleske
That should be "does *not* come with the cert installed", of course :-(.
sleske
A: 

I just found this site: DigiCert

Don't know how good they are, but seem to be quite cheap.

Darryl Hein
+1  A: 

I haven't used them, but namecheap.com currently resells rapidssl certs for $20 a year and comodo positivessl for $10 a year.

Van Gale
Rapids are for $11/y. I bought one, but didn't use it so far.
agsamek
A: 

I'm buying Rapidssl certificates from Sslmatic (http://www.sslmatic.com) for only $19.99. They sell Geotrust and Verisign to very cheap prices too.

Danny Maya
+1  A: 

You can get free certificates at CACert. Unfortunately most browsers doesn't have their root certificate installed.

Martin Liversage
A: 

I got my Deluxe ssl certificates from http://www.thewebpole.com/ .This site provides the domain registrations service, web hosting packages ,domain appraisal etc., at cheap price.I recommended to this only.