Best vendors for SSL Certs?

[Nancy OShea]

I need a good source for basic SSL certificates. 

Any suggestions?

[EbaySeller]

Your title mentions "best". Only you know what that means to you. If you're looking for a "good source" then it's best to take a step back and not look for a good source of something specific, but rather look for a good source to find something specific. In this case Google search would be your best source of finding what is considered the "best" for you.

[EbaySeller]

Yes! These are examples of what is best for someone's unique situation, for which Nancy didn't specify.

My example of what I consider the best would be AWS Certificate Manager. It's free, easy to use, integrates with other AWS services, and is just one other valuable tool of many available in AWS's platform.

Judging from previous posts I've seen from Nancy, I already know that she relies on hosting plans and is not completely familiar with AWS's platform or managing a server. With that knowledge I can safely assume that my recommendation of AWS Certificate Manager would be of little use to Nancy.

Not everyone is privy to knowledge of what Nancy is capable of though, so it's "best" that she specifies what her requirements are if she wants an accurate reply that pertains to her situation. Providing as much info as possible is forum 101.

[Nancy OShea]

All comments are welcomed.   I have various clients with different needs and hosting.

Personally, I have multiple domains across dedicated, shared & AWS EC2s.  But that's not my main concern here.

My typical client has  basic shared or VPS hosting and dedicated IPs.  They do not collect sensitive data.   The #1 question these days is "how best to make Google happy without spending a fortune on SSL certs?"  The cert must work with PHP sites.

I hope that answers some of your questions.

Nancy

[pziecina]

Certificates are site specific and the server side language is irrelevant.

Applying a cetificate is not for the faint hearted, but if you are happy to edit server config files, you should be able to do it yourself, (e.g. apache config), with many visual interfaces such as the cPanel now having a certificate manager, (not exclusive to aws), you just have to ensure that the certificate is from a recognised supplier.

If you have never used certificates before ensure you read -

https://www.symantec.com/connect/blogs/symantec-s-response-google-s-subca-proposal

Edit: A certificate ensures your server connection to the users browser is secure, it does not ensure your code is secure.

[Nancy OShea]

I know, Paula.

FYI, some shared hosts offer free or low cost certs that do not extend to ASP, PHP or JSP sites.   Given how many people use WordPress, it's another way to extract more money from customers.

Nancy

[pziecina]

I know this may not sound as innocent as intended, but certificates are another one of those items that you get what you pay for, upto a certain point.

lets encrypt is great providing you can install, and verify the install, then continue to do so every 90 days. What it does not provide is any insurance cover. A cheap paid for certificate provider often does not go through the yearly provider certification process, or offer adaquate insurance cover, (insurance cover is something many forget to check).

[EbaySeller]

pziecina  wrote

Applying a certificate is not for the faint hearted, but if you are happy to edit server config files, you should be able to do it yourself, (e.g. apache config)

It looks like Nancy tried and failed editing server config file. Visiting the secure URL of her site confirms that apache is not configured properly for 443. Viewing the expired certificate further confirms the inability to manually manage a certificate. I think something that is managed by a service would be Nancy's best option. Let's Encrypt might be out of her league.

[Nancy OShea]

<It looks like Nancy tried and failed editing server config file.>

Actually no.  We are aware of several problems on that server.  It is slated for repairs on Monday morning.   

[BenPleysier]

I am sorry to see that you are attacking a person rather than add to a solution to the problem. I hope your post gets deleted by the Moderator (other than me)

[EbaySeller]

BenPleysier  wrote

I am sorry to see that you are attacking a person rather than add to a solution to the problem. I hope your post gets deleted by the Moderator (other than me)

I am sorry you can't understand the fact that having complete understanding of one's ability is required to determine what services, if any, they are capable of delivering to their client(s?). And please - trying to act like you're a moderator by deleting my previous post and saying I'm stalking Nancy's website when her and yourself shamelessly link to her site every chance you get? Grow up! I have hope for you too, but unlike you I choose to contribute helpful posts to this forum instead of posting what I hope of others.

[BenPleysier]

Sorry, do not have much time to devote to irrelevant replies. I am working on a colouring book application for one of my clients.

[BenPleysier]

Nancy,

The Best Vendor for SSL Certificates is https://letsencrypt.org/ and a close runner up is Domain Names, Web Hosting and SSL Certificates - GoDaddy

Edit: I have asked my host to include LetsEncrypt, still waiting for the outcome.

[hans-g.]

Hi Nancy,

here as an interesting information about SSL Certificates my German provider offers. There Günstige SSL-Zertifikate bestellen one can see the wide variety esp. what concerns Comodo Relying Party Warranty Details .

I'm sure that the language barrier plays no role, or?

Hans-Günter

[pziecina]

It will depend on your type of hosting.

If you have a dedicated server that you set-up everything for, then Bens 'letsencrypt' would be a good solution. If it is shared server, or the sever provider sets-up everything, it would be best to ask them to provide their recommended providers certificate, as that/those certificates would be the ones they are most familiar with setting-up.