[150184] in North American Network Operators' Group
Re: X.509 Certs For Personal Use
daemon@ATHENA.MIT.EDU (toor)
Sat Feb 18 05:17:45 2012
In-Reply-To: <20120218033210.88103.qmail@joyce.lan>
Date: Sat, 18 Feb 2012 18:16:50 +0800
From: toor <lists@1337.mx>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I use http://www.startssl.com/ for all my personal certifcates. I have
not had any issues with the validations (once you have an account you
can validate a domain by sending an email to a predefined list of
contact addresses) and the certificates are issued instantly.
On Sat, Feb 18, 2012 at 11:32 AM, John Levine <johnl@iecc.com> wrote:
> I use these guys: http://www.cheapssls.com/
>
> They sell Geotrust and Comodo certs for under $10/yr. =A0The hassle
> level is quite low. =A0First you order a cert providing the usual
> billing info, then you go to their web site, pick the order you just
> paid for, go to a screen where you paste in your signing request, and
> pick which e-mail address to send the confirmation message to. =A0Click
> a URL in the confirmation message and the signed cert shows up in a
> few minutes. =A0The certs are chained, but I've had no acceptance
> problems once I realized I had to to add an extra Apache config line
> to serve the intermediate cert.
>
> If you get a Comodo cert for example.com, it'll also work for
> www.example.com. =A0Other than that, they seem to be equivalent.
>
> If you just want something for testing, http://freessl.com/ will
> provide a real 30 day Geotrust cert for free, with similarly low
> hassle. =A0At the end of the 30 days, you can renew the cert into a paid
> one at cheapssls or any other Geotrust reseller.
>
> I realize there are places that will provide totally free certs, but
> their hassle level is far greater. =A0For $24 I can get a Comodo cert
> that will make my SSL complaints go away for three years, which seems
> like a bargain to me.
>
> R's,
> John
>
