Let's say I know a guy is selling an SSL cert at a very low price, assume they will generate a real and valid cert for me, since I need to submit my CSR to them and they pass to the CA, are there any risks involved in buying cert from them technically?
Second question is: given a cert, are there any methods I can know from whom the cert was bought? (Besides asking the CA)
Update: I mean the reseller is selling well-known SSL (Comodo Positive SSL) at a very cheap price, e.g. 10-20% than reseller such as namecheap, but I need to submit CSR and buy from them instead of Comodo, so I need to know the risk.