6

Is there any non-commercial certificate authority capable of issuing valid certificates for web applications? I mean, the certificate must be accepted by browsers, like those of commercial CAs?

Hendrik Brummermann
  • 27,158
  • 6
  • 80
  • 121
Jérôme Verstrynge
  • 215
  • 1
  • 5
  • Basically dupe https://security.stackexchange.com/questions/1167/where-to-get-an-ssl-certificate-for-personal-website and (later) https://security.stackexchange.com/questions/18919/are-there-technical-disadvantages-in-using-free-ssl-certificates – dave_thompson_085 Nov 04 '21 at 02:34

2 Answers2

4

Start SSL is a commercial CA that issues standard SSL certificates free of charge. They are accepted by all common browsers, except for very old versions of Opera.

Hendrik Brummermann
  • 27,158
  • 6
  • 80
  • 121
  • UPDATE: StartSSL/Startcom was sold to WoSign who were caught cheating in 2016 and over the next year or so distrusted by everybody; see the dupes I added to the Q and https://security.stackexchange.com/questions/127575/is-startssl-com-a-trustworthy-site – dave_thompson_085 Nov 04 '21 at 02:37
2

You can try Let's Encrypt. Is a free, automated, and open certificate authority brought to you by the Internet Security Research Group (ISRG) and sponsored by several companies.

Rafa Moyano
  • 21
  • 1