Re: SSL Certs - VeriSign vs Thawte

On Mon, Oct 12, 2009 at 20:15, Chuck Lewis
<chuck.lewis@xxxxxxxxxxxxxxxxx> wrote:

We bought one of our websites several years back from VeriSign. We are
getting ready to bring another website online here shortly and I was
looking at EV SSL Certs and VeriSign is flat out TWICE as much as
Thawte. I know Thawte has been around and is well known (and even owned
by VeriSign I guess ?).

Are you sure you need an EV Certificate? For most purposes, a 29$
domain-validated godaddy certificate is enough. I say most, because EV
Certificates make sense for online shops or service providers.

So why wouldn't I get one from Thawte ?

Few reasons, really. You may run into issues with devices which do not
accept Thawte's Root certificate. The IBM i's list of root
certificates in the DCM is particularly poor, and does not have an
automatic update mechanism. So consider all the endpoints that will be
used with that certificate - if you're only expecting browser
endpoints from modern operating systems, this is nothing to worry
about.

I've also run into an issue that Microsoft only accepts WinQual
submissions using a Verisign Code Signing certificate, which really
made me puke. Other vendors may do similar stuff.

Basically: Tell us what you intend to do with the cerficate.
Otherwise, we'll just be guessing.