8 ms·

You might be able to use StartSSL's free one: https://www.startssl.com/ https://www.startssl.com/

by nmb 12y ago

kamaln7 12y ago
Just keep in mind that Class 1 (free) certificates are for non-commercial sites only.
- pyvek 12y ago
  Also, StartSSL's certs don't work on android (you get cert not trusted error) for some reason.
  - dvanduzer 12y ago
    I haven't checked any recent Android trust stores, but this might be due to a lack of an intermediate certificate. The vast majority of modern browsers know how to find intermediate certificates online. Android's browser doesn't, for whatever reason. You have to bundle it on your web server.
    - pyvek 12y ago
      That was the problem. Works well on my android now. Thanks!
  - alec 12y ago
    Works for me - I have a StartSSL personal cert and an Android phone (Nexus 5 / KitKat), and all of Chrome, Chrome Beta, and Firefox load up the site without any sort of warning or other indication. I also dug out a Jelly Bean phone (Galaxy Nexus) to try with the stock Android Browser and didn't have any issues.
  - mike-cardwell 12y ago
    StartSSL has worked on Android since version 2.2, which was released 4 years ago.
- asutherland 12y ago
  Wow! This surprised me since https://www.startssl.com/?app=1 https://www.startssl.com/?app=1 makes no mention of this, but indeed section 3.1.2.1 of the StartCom CA policy at https://www.startssl.com/policy.pdf https://www.startssl.com/policy.pdf does state: "Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature, when using high-profile brands and names or if involved in obtaining or relaying sensitive information such as health records, financial details, personal information etc." Looking further, it appears that while these classifications are not formally encoded (that I can find after a cursory investigation; please let me know if I am wrong), it does appear to be the case that the concept/nomenclature exists amongst multiple CAs. Wikipedia context: http://en.wikipedia.org/wiki/Public_key_certificate#Classification http://en.wikipedia.org/wiki/Public_key_certificate#Classifi..., Indian Government CA policy: http://cca.gov.in/cca/?q=node/45 http://cca.gov.in/cca/?q=node/45 Thanks for pointing this out, as I have been erroneously indicating that the StartCom free certificates might be viable options in all cases, where it seems like the reality is somewhat different. (Although I still believe the barrier to usage of valid/non-self-signed certificates to be quite low and for it to be strongly advisable for server operators to use them.) (edit note: inserted the missing word "been" shortly after submitting.)

You might be able to use StartSSL's free one: https://www.startssl.com/ https://www.startssl.com/

by nmb 12y ago

You might be able to use StartSSL's free one: https://www.startssl.com/ https://www.startssl.com/

kamaln7 12y ago

Just keep in mind that Class 1 (free) certificates are for non-commercial sites only.

pyvek 12y ago
Also, StartSSL's certs don't work on android (you get cert not trusted error) for some reason.
- dvanduzer 12y ago
  I haven't checked any recent Android trust stores, but this might be due to a lack of an intermediate certificate. The vast majority of modern browsers know how to find intermediate certificates online. Android's browser doesn't, for whatever reason. You have to bundle it on your web server.
  - pyvek 12y ago
    That was the problem. Works well on my android now. Thanks!
- alec 12y ago
  Works for me - I have a StartSSL personal cert and an Android phone (Nexus 5 / KitKat), and all of Chrome, Chrome Beta, and Firefox load up the site without any sort of warning or other indication. I also dug out a Jelly Bean phone (Galaxy Nexus) to try with the stock Android Browser and didn't have any issues.
- mike-cardwell 12y ago
  StartSSL has worked on Android since version 2.2, which was released 4 years ago.
asutherland 12y ago
Wow! This surprised me since https://www.startssl.com/?app=1 https://www.startssl.com/?app=1 makes no mention of this, but indeed section 3.1.2.1 of the StartCom CA policy at https://www.startssl.com/policy.pdf https://www.startssl.com/policy.pdf does state: "Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature, when using high-profile brands and names or if involved in obtaining or relaying sensitive information such as health records, financial details, personal information etc." Looking further, it appears that while these classifications are not formally encoded (that I can find after a cursory investigation; please let me know if I am wrong), it does appear to be the case that the concept/nomenclature exists amongst multiple CAs. Wikipedia context: http://en.wikipedia.org/wiki/Public_key_certificate#Classification http://en.wikipedia.org/wiki/Public_key_certificate#Classifi..., Indian Government CA policy: http://cca.gov.in/cca/?q=node/45 http://cca.gov.in/cca/?q=node/45 Thanks for pointing this out, as I have been erroneously indicating that the StartCom free certificates might be viable options in all cases, where it seems like the reality is somewhat different. (Although I still believe the barrier to usage of valid/non-self-signed certificates to be quite low and for it to be strongly advisable for server operators to use them.) (edit note: inserted the missing word "been" shortly after submitting.)