All geek questions in one place

Paid SSL certificate and free SSL certificate

What is the main difference (maybe a pro / con list) from buying a custom SSL certificate and getting it from the free certificate provided by Let Encrypt. It's all about simple https in our web application

PS This question can be completely insane. But I believe that you understand what I'm trying to do. So please throw some light on this

+6
source share
1 answer

The main practical difference is trusting all browsers and third-party systems, such as Android, iOS, or Windows.

Allows you to encrypt this restriction and suggested a solution that you can read on your website https://letsencrypt.org/certificates/

Our intermediate element is signed by ISRG Root X1 . However, since we are a very new certification authority, ISRG Root X1 is not yet trusted by most browsers . In order to gain trust immediately, our intermediate segment is also cross-signed by another certification authority, IdenTrust , whose root directory is already trusted in all major browsers . In particular, IdenTrust has cross-signed our middleware using its DST Root CA X3.

In fact, their certificates are signed by a trusted "regular" CA. Therefore, in practice there is no difference

Take a look at letencrypt's own web certificate, it is signed by DST Root CA X3 (IdenTrust) enter image description here

I checked if the CA is present in some kind of keystore:

  • Chrome, IExplorer, Edge (using windows 10): OK
  • Mozilla Firefox: OK
  • Android (Nexus 5x -android 7): OK

Full list here: https://letsencrypt.org/docs/certificate-compatibility/

+6
source

Source: https://habr.com/ru/post/1013411/

More articles:


All Articles