Re: SSL Certs - VeriSign vs Thawte

["Chuck Lewis" <chuck.lewis@xxxxxxxxxxxxxxxxx>]

Sorry. It's an ecommerce site aimed at the retail market. That help ?

Thanks :-)

Chuck

-----Original Message-----
From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx]
On Behalf Of Lukas Beeler
Sent: Monday, October 12, 2009 2:58 PM
To: PC Technical Discussion for iSeries Users
Subject: Re: [PCTECH] SSL Certs - VeriSign vs Thawte

On Mon, Oct 12, 2009 at 20:15, Chuck Lewis
<chuck.lewis@xxxxxxxxxxxxxxxxx> wrote:
> We bought one of our websites several years back from VeriSign. We are
> getting ready to bring another website online here shortly and I was
> looking at EV SSL Certs and VeriSign is flat out TWICE as much as
> Thawte. I know Thawte has been around and is well known (and even
owned
> by VeriSign I guess ?).

Are you sure you need an EV Certificate? For most purposes, a 29$
domain-validated godaddy certificate is enough. I say most, because EV
Certificates make sense for online shops or service providers.

> So why wouldn't I get one from Thawte ?

Few reasons, really. You may run into issues with devices which do not
accept Thawte's Root certificate. The IBM i's list of root
certificates in the DCM is particularly poor, and does not have an
automatic update mechanism. So consider all the endpoints that will be
used with that certificate - if you're only expecting browser
endpoints from modern operating systems, this is nothing to worry
about.

I've also run into an issue that Microsoft only accepts WinQual
submissions using a Verisign Code Signing certificate, which really
made me puke. Other vendors may do similar stuff.

Basically: Tell us what you intend to do with the cerficate.
Otherwise, we'll just be guessing.