Re: Certificate vendors

[Alexander Kurt Keller <alkeller () SFSU EDU>]

Hi Rob,

It isn't too good to be true, our unit has used InstantSSL/Comodo for the past 5 years without significant issues.  For 
SSL you will need to install an intermediary certificate on the server (i suspect Thawte is the same), but this is easy 
and well documented.

It is also worth mentioning the InCommon offering (which leverages Comodo):
http://www.incommonfederation.org/cert/

Unlimited certs on a sliding fee scale:
https://www.incommon.org/cert/cert_fee.html

But this requires InCommon membership which includes a registration and annual fee.

These folks offer free SSL certs for educational institutes, but i have never used them and therefore can't vouch for 
the service:
http://certs.ipsca.com/Products/SSLServer.asp

best,
alex


Alex Keller
Systems Administrator
Academic Technology, San Francisco State University
Office: Burk Hall 153 Phone: (415)338-6117 Email: alkeller () sfsu edu

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Rob 
Tanner
Sent: Tuesday, January 11, 2011 3:44 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Certificate vendors

We are currently using Thawte for all our certificates and Thawte is pretty pricey.  Comodo's pricing, by comparison, 
seems almost to good to be true.  Is anybody using Comodo for their SSL certificates and have you anything particularly 
positive to say or, and more to the point, any warnings or red flags?

Thanks,



Rob Tanner
UNIX Services Manager
Linfield College, McMinnville Oregon