Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

With CAcert.org losing trust in browsers and OSs and StartSSL providing only top-level domain certificates, are there any free SSL certificates providers for second-level domains?

share|improve this question

closed as off-topic by Xander, Mark, Steve, schroeder, Rory Alsop Aug 20 at 7:26

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

3 Answers 3

up vote 1 down vote accepted

StartSSL does in fact offer free SSL certs for subdomains, though they are Class 1 certificates. You just have to go through a normal domain validation on the actual subdomain. Wildcard certificates (e.g. *.example.com) are not available for free, and are only available when you purchase a Class 2 or 3 cert. I have used these free subdomain certificates on my various personal projects, and they validate in Safari, Chrome, Firefox, and IE just fine. You don't get the green status bar, but you wouldn't anyway without paying for extended validation.

share|improve this answer
I see. It looks like you can only choose among a set of "pre-defined" subdomains in the select drop-down list. Am I correct? –  moebius Aug 22 at 7:45
I don't remember having to select from any pre-defined list. I got certs for alpha., testing., www., and a few other more random subdomains. They all work just fine. –  Craine Aug 29 at 16:38

As far as I am aware there is not. I don't believe that CAcert.org was really ever accepted widely by browsers if I remember right. You can get second-level domain certificates for fairly cheap though through GlobeSSL or SSLs.com and by fairly cheap I mean for about $10.00/year. I personally find SSLS.com easier to use than Globe but both are good.

share|improve this answer

StartSSL offers free class 1 personal certificates which are accepted by most browsers. However, to get any higher-level certificates, you will have to purchase.


share|improve this answer
As mentioned by the asker. StartSSL does not provide SSLs for subdomains (I've tried). He wants a free one for a subdomain. –  Travis Pessetto Aug 19 at 17:17
I've gotten certs for subdomains for free from StartSSL, just earlier this year. Using them in production now. Did they change their policy recently? –  Craine Aug 20 at 3:04
I think he's looking for a way to get a cert for a subdomain while only owning the subdomain and not the domain, which StartSSL doesn't offer. –  user2313067 Aug 20 at 4:37

Not the answer you're looking for? Browse other questions tagged or ask your own question.