Vaughn's Summaries logo Vaughn's Summaries

Internet Summaries
Website Security

SSL Certificate Provider List
How Do They Compare?

by Vaughn Aubuchon

HERE is a list of the top companies that provide SSL certificates, certified by an official Certificate Authoritiy (CA), and self-signed, as well.



This is very confusing. There are really no "standard" options. Every place you go will tell you something different, and charge you a different price.

SSL Options by Vendor

SSL Packages by Vendor
.

-

100

140


top of page

SLL Offerings by Vendor

-

SSL
Certificate
Issuer
US
Alexa
Rank
1-Year Term
Protection
SS*
SSL
CA SSL
EV
SSL
Wild
card

Comodo

8 K

NO

$ 77

$ 200

$ 405

Digicert

11 K

NO

$ 175

?

?

Entrust

66 K

NO
NO

?

$ 574

GlobalSign

4 K

NO

?

$ 599

$ 849

GoDaddy

82

NO

?

?

$ 270

Let's Encrypt

13 K

free, but very techy, tricky

Network Solutions

3 K

NO

?

$ 400

$ 512

.
SSL Certs UNTRUSTED by Google
These SSL Certificates Must Be Replaced.

Geo Trust

23 K

NO

?

$ 299

$ 745

RapidSSL

72 K

NO

$ 59

NO

$ 249

Symantec

2 K

?

$ 995

$1,499

$1,999

Thawte

68 K

NO

?

$ 299

$ 599

-

Address Bar
Security Indicator

Green Padlock gif
Green Padlock gif
Green Name in Address Bar

Typical Validation

Self
DV
OV

Strength

Weak
Strong
Best

Issued by a CA?

Yes

Typical Site Application

1
1
Multiple sites

What I ...

got
want
-

Notes:
CA   =   Issued by a
Certificate Authority
CSR =   Certificate Signing Request
DV   =   Domain Validated
DVC =
Domain Validated Certificate
EV   =   Extended Validation (since 2007)
FQDN =
Fully Qualified Domain Name
OV   =   Organizationally Validated (strongest)
PKI  =   
Public Key Infrastructure
SAN =  Subject Alternative Name
SS    =  Self-signed Certificate (weakest, cheapest)
SSL  =  Secure Sockets Layer
TLS  =  
Transport Layer Security (replacing SSL)
UCC =  Unified Communications Certificate
WC   =  
Wildcard Certificate (strongest)

Some providers use "
Custom" names for their products, which make it difficult to determine JUST EXACTLY WHAT they are selling. Do you see all those question marks above? (clarified below)

Worse Than Implied - Some providers provide ONLY Self-signed Certificates, but don't tell you that,
such as RapidSSL.

Better Than Implied - Some providers' options are issued by CAs, but fail to mention that fact.
.

top of page

* BEWARE OF SELF-SIGNING

I THOUGHT that I had purchased a CA-Generated Certificate. Here is the message I got from Google telling me that my SSL Cert is NO GOOD. --->

Google notice - "Self-signed cert is no good".
Here is the text from the Google warning notice above -

"Google has detected that the SSL/TLS certificate used on https://www.vaughns-1-pagers.com/ is self-signed, which means that it was issued by your server, rather than by a Certificate Authority. Because only Certificate Authorities are considered trusted sources for SSL/TLS certificates, your certificate cannot be trusted by most of the browsers. In addition, a self-signed certificate means that your content is not authenticated, it can be modified, and your user's data or browsing behavior can be intercepted by a third-party. As a result, many web browsers will block users by displaying a security warning message when your site is accessed. This is done to protect user's browsing behavior from being intercepted by a third party, which can happen on sites that are not secure."

In other words, a self-signed certificate is WORSE THAN NO CERTIFICATE AT ALL. With NO CERTIFICATE, Google does not send visitors away.
.

So, I bought an SSL Cert from RapidSSL, and what did I get?
- "... your certificate
cannot be trusted"
- "... your content
is not authenticated"

What the #$%! kind of "certification" is THAT?

"We certify that your SSL is no good."

Apparently, my SSL Cert from RapidSSL is "issued by a CA". They informed me that my Cert was "not configured properly". It seems to be working fine now. My lack of understanding of the SSL world caused me to panic. Unless you are VERY familiar with the SSL process, you need someone to guide you through the steps. Easy, straightforward instructions do not exist. ("Everything you need to know is on blah-blah page", does NOT cut the mustard). Make certain you NEVER check the big box that says "Self-signed." I did not check the box, yet I received the alert from Google.

Clicking the Green Padlock in the Address Bar -
The "common name" of my Cert is --->
RapidSSL SHA256 CA
Organization ---> GeoTrust Inc.
I assume that the "CA" in the name refers to GeoTrust as a "Certificate Authority". This was never clear to me in the sign-up process. I never saw the words "Certificate Authority" anywhere. Nor DV, for that matter.

.

150 - 450

50

50

50

60

60

20



top of page

SLL Packages by Vendor

Provider

.
Price

.
SSL Product

2017
2018

Comodo

(cheap)

$ 77
$ 200
$ 99
$ 249

Comodo DV Certificate
EV SSL
.

$ 405
$ 235
$ 0
$ ?
$ ?
gone

Wildcard SSL Certificate
UCC SSL
Free SSL Certificate
.

Digicert

(very pricey)

$ 139
?

$ 198
$ 299

Standard SSL (DV)
EV SSL
.

$ 234
$ 239
$ 475
$ 358
$ 499
$ 658

Multi-Domain SSL
EV Multi-Domain SSL
Wildcard SSL
.

Entrust

(pricey)

$ 163
$ 196
.
$ 174
$ 196

Standard (OV) SSL Certs
OV- Advantage SSL Certs
.

$ 280
$ 262

$ 122
$ 574
$ 373
$ 278

$ 122
$ 609

EV Multi-Domain SSL Certs
UC Multi-Domain SSL Certs

Private SSL Certs
Wildcard SSL Certs
.

GlobalSign

(pricey)

-
$ 249
$ 349
$ 599
-
$ 249
$ 349
$ 599

For Single Websites
--- Domain Validated
--- Organization Validated
--- Extended Validation
.

-
$ 249
$ 249
$ 249
$ 849
-
$ 249
$ 249
$ 249
$ 849

OrganizationSSL (Multi-Domain)
--- DV SSL
--- OV SSL
--- EV SSL
--- Wildcard
.

GoDaddy

(cheap)

-
$ 56
$ xxx
$ xxx
-
$ 60
$ 104
$ 100

Protect One Website
--- DV (Standard)
--- OV (DeLuxe)
--- EV (Premium)
.

-
$ xxx
$ xxx
$ xxx
-
$ 136
$ 225
$ 315

Protect Multiple Websites
--- DV
--- OV
--- EV
.

Network Solutions

(cheap)

$ 55
$ 108

$ 166
$ 512
$ 400
$ 60
$ 125

$ 200
$ 579
$ 400

Xpress (DV) (all 2 years)
Basic (OV)

Advanced (OV)
Wildcard
Extended
.

.
UNTRUSTED BY Google

Symantec
   (Verisign)

(Most expensive)

$ 399
$ 995
$ 995
$ 1,499
$ 1,999
GONE

Secure Site (Internal Network)
Secure Site with EV (Public)
Secure Site Pro
Secure Site Pro with EV
Secure Site Wildcard

Geo Trust
$ 149

$ 200
$ 300
$ 600
$ xxx
$ 745
$ 149

$ 199
$ 300
$ 599
$ xxx
$ 745

QuickSSL Premium

True BusinessID
True BusinessID with EV
True BusinessID Wildcard
UC/SAN
QuickSSL Premium Wildcard

RapidSSL (GeoTrust)

$ 59

$ 249
$ 59

$ 249

DV Certificate

Wildcard Certificate

-

Thawte
   (Symantec)

$ 150
$ 300

$ 200
$ 745
$ xxx
$ 600
$ 150
$ 299

$ 149
$ 745
$ xxx
$ 699

DV Web Server Certificate
EV Web Server Certificate

SSL 123 Certificates
SSL 123 Wildcard Certificates
SAN/UC Capable Certificates
SSL Wildcard Certificates

Thoma Bravo now owns
     - DigiCert, which now owns
         -
Symantec, which owns
             -
GeoTrust, which owns
                  -
RapidSSL

         - Symantec owns Thawte
         - Symantec sold Veritas to Carlisle Group

NOTES -

Listed in LOGICAL order, as opposed to the listing on the website. I can't figure out GoDaddy pricing. Can you?

HA! YOU try to figure it out.
.

90

50

50

260- 450



Disclaimer
This page consists of a comparison of SSL certificates from various providers.

Although the author makes every effort to verify the information on this page, no information on this page is guaranteed to be correct, and any data contained herein is subject to change.

-

top of page


Vaughn Aubuchon Author Bio

Vaughn's Summaries
©2017, 2018 Vaughn Aubuchon
www.vaughns-1-pagers.com
All Rights Reserved
Site Map

This Vaughns SSL Cert. Provider Summary
page was last updated on 2018-09-14.