As of January 1st, 2017 SHA1 will have totally disappeared.
It is already no longer possible to order or renew a SHA1 certificate that would expire after this date and from January 1st, 2016 we will definitely cease issuing SHA1-signed certificates.
All the deadlines regarding SHA1 disappearance
All about hash algoritms
SHA256 option | SHA256 option | |||||||
SHA256 version | SHA256 version | SAN option |
SHA256 option | SAN option |
||||
Name | X509 TBS Ecommerce SHA1 | Comodo SSL SHA1 | Thawte Standard | GeoTrust True BusinessID |
Symantec Secure Site | |||
---|---|---|---|---|---|---|---|---|
buy | buy | buy | buy | buy | ||||
Price - 1 year | £65 | £80 | £89 | £111 | £233 | |||
Browsers recognition | 99% | 99% | 99.8% | 98% | 99.6% | |||
SERVICE INCLUDED | ||||||||
Installable on how many machines? | 1 | UNLIMITED | UNLIMITED | UNLIMITED | 1 | |||
Price of additional machine licence | purchase another certificate | - | - | - | £140 | |||
Number of included SANs / sub-domains | - | - | - | - | - | |||
Price of additional SAN / sub-domain | - | - |
£64
|
- |
£140
|
|||
Compliant w/ Microsoft UCC standard | - | - | - | |||||
|
- | - | - | - | ||||
Seal-In-Search
|
- | - | - | - | ||||
Cipherment |
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
|||
Standards | X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, chained | |||
Free reissue | Lifetime | Lifetime | Lifetime |
Lifetime
|
Lifetime | |||
Money back guarantee | no | 30 days | 30 days | 30 days | 30 days | |||
Other | Secure with and without www. | |||||||
Average delivery time
|
3 business days | 2 business days | 2 business days | 5 business days | 2 business days | |||
Web logo included | ||||||||
Warranty | $2 500 | $250 000 | $1 250 000 | $1 250 000 | $1 500 000 | |||
Data Sheet | ||||||||
quote | quote | quote | quote | quote | ||||
|
||||||||
(1): guarantee applicable for IE 5.01+, Netscape 4.77+, Mozilla/Firefox/SeaMonkey/Camino, Safari, Chrome, J2RE 1.6.0+. (2): guarantee applicable for W IE 5.01+, Netscape 4.51+, Mozilla/Firefox/SeaMonkey/Camino, Safari, Chrome, J2RE 1.4.2+. (3): guarantee applicable IE 4.0+, Netscape 4.0+, Mozilla/Firefox/SeaMonkey/Camino, Safari, Chrome, J2RE 1.3.0_02+. (4): guarantee applicable for IE 5.01+, Netscape 4.79+, Mozilla/Firefox/SeaMonkey/Camino, Safari, Chrome, J2RE 1.4.2_06+. Not suitable for all mobiles. (5): garantee applicable for IE 7+, Netscape 8+, Mozilla 1.5+, Firefox / SeaMonkey / Camino, Safari 1.2+, Chrome, J2RE 1.5+ (6): Trust seal displayed in the browsers' search results, next to the website link for users of Norton Internet Security, Norton 360 or AVG. (7): Get further information about the specific management of those SANs. (8): Excepted particular cases regarding additional SANs. See our FAQ. (9): Get further information about the specific management of those SANs. (10): Indicative delivery times that can be impacted by occasional disruptions. Consult the up-to-date situation of each supplier. (11): Within the limit of 6 reissuances. |
EV SSL certificates are the must-have products to fight phishing. They activate the green url bar in most web browsers.
SHA256 option | SHA256 option | ||||||
SAN option |
SHA256 option | SHA256 version | SAN option |
||||
Name | Thawte SSL EV |
GeoTrust True Business ID w/ EV | Comodo EV SHA1 |
Symantec Secure Site EV | |||
---|---|---|---|---|---|---|---|
buy | buy | buy | buy | ||||
Price - 1 year | £183 | £199 | £242 | £539 | |||
Green bar activation | |||||||
Old browser recognition | 99.8% | 98% | 99% | 99.6% | |||
SERVICE INCLUDED | |||||||
Installable on how many machines? | UNLIMITED | UNLIMITED | UNLIMITED | 1 | |||
Price of additional machine license | - | - | - | £510 | |||
Price of additional SAN |
£146
|
- | See Comodo EV multiple sites |
£510
|
|||
Compliant w/ Microsoft UCC standard | - | - | |||||
|
- | - | - | ||||
Vulnerability assessment
|
- | - | - | ||||
Seal-In-Search
|
- | - | - | ||||
Average delivery time
|
7 business days | 10 business days | 4 business days | 7 business days | |||
Cipherment |
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
|||
Standards | EV, X509v3, SSLv3, TLS, chained | EV, X509v3, SSLv3, TLS, chained | EV, X509v3, SSLv3, TLS, chained | EV, X509v3, SSLv3, TLS, chained | |||
Free reissue | Lifetime |
Lifetime
|
Lifetime | Lifetime | |||
Money back guarantee | 30 days | 30 days | 30 days | 30 days | |||
Other | Secures with and without www. | ||||||
Web logo included | |||||||
Warranty | $1 500 000 | $1 500 000 | $1 750 000 | $1 750 000 | |||
Data Sheet | |||||||
quote | quote | quote | quote | ||||
|
|||||||
(1): guarantee applicable for IE 5.01+, Netscape 4.77+, Mozilla / Firefox / SeaMonkey / Camino, Safari, Chrome, J2RE 1.5.0_08+. Not suitable for all mobiles. (2): guarantee applicable for IE 4.0+, Netscape 4.0+, Mozilla / Firefox / SeaMonkey / Camino, Safari, Chrome, J2RE 1.3.0_02+. (3): guarantee applicable for IE 5.01+, Netscape 4.6+, Mozilla / Firefox / SeaMonkey / Camino, Safari, Chrome, J2RE 1.4.2_03+. (4): garantee applicable for IE 5.01+, Netscape 4.51+, Mozilla / Firefox / SeaMonkey / Camino, Safari, Chrome, J2RE 1.4.2_02+. (5): Trust seal displayed in the browsers' search results, next to the website link for users of Norton Internet Security, Norton 360 or AVG. (6): Analyze of your site, web applications, server software and network ports to detect security vulnerabilities that could be used by hackers to infiltrate your systems. (7): Get further information about the specific management of those SANs. (8): Excepted particular cases regarding additional SANs. See our FAQ. (9): Get further information about the specific management of those SANs. (10): Indicative delivery times that can be impacted by occasional disruptions. Consult the up-to-date situation of each supplier. (11): Within the limit of 6 reissuances. |
This type of SSL certificate (also called Subject Alternative Name or SAN) enables to secure not only one website but a large number of sites (a list of sites) hosted on a shared infrastructure (server with multiple names, reverse proxy). Ideal to secure multiple brands of a corporation.
handles wildcard SANs |
||||||
SHA256 version | SHA256 version | SHA256 version | ||||
Name | Comodo UCC SHA1 | Comodo EV Multi-sites SHA1 | TBS X509 Multiple Sites SHA1 | |||
---|---|---|---|---|---|---|
buy | buy | buy | ||||
Number of sites / FQDN / SAN included | 4 | 3 | 12 | |||
Compliant w/ Microsoft UCC standard | - | - | ||||
Price - 1 year | £231 | £518 | £564 | |||
Price (per additional site/SAN) | £47 | £168 | £41 | |||
Price (per additional wildcard site/SAN) | £235 | - | - | |||
Browsers recognition | 99% | 99% | 99% | |||
SERVICE INCLUDED | ||||||
Installable on how many machines? | UNLIMITED | UNLIMITED | 1 | |||
Price of additional machine license | - | - | purchase another certificate | |||
Encipherment |
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
|||
Public names in the SANs | no limitation | no limitation | no limitation | |||
Internal names in the SANs | Still possible until November 1st 2015. After this date it will be forbidden. Learn more | |||||
IPs in the SANs | no limitation | none | no limitation | |||
Standards | X509v3, SSLv3, TLS, Exchange2007, chained | EV, X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, SGC, chained | |||
Free reissue | Lifetime, including SAN changes | Lifetime, including SAN changes | Lifetime, including SAN changes | |||
Money back guarantee | 30 days | 30 days | 30 days | |||
Average delivery time
|
3 business days | 6 business days | 3 business days | |||
Other | Available with 12 SANs. Tailored for Exchange | NEW EV PRODUCT! | Available with 40 and 100 SANs through a TBS-certificats account | |||
Web logo included | - | - | - | |||
Warranty | $0 | $1 750 000 | $0 | |||
Data Sheet | ||||||
quote | quote | quote | ||||
|
||||||
(1): guarantee applicable for IE 5.01+ Windows, Netscape 6+, Mozilla/Firefox/SeaMonkey/Camino, Chrome, and Safari 1.2+ browsers. (2): guarantee applicable for IE 5.01+ Windows, Netscape 6+, Mozilla/Firefox/SeaMonkey/Camino, Chrome, and Safari 1.2+ browsers. Suitable for Windows Mobile 5+. (3): guarantee applicable for IE 5.01+ Windows, Netscape 6+, Mozilla/Firefox/SeaMonkey/Camino, Chrome, and Safari 1.2+ browsers. Not Suitable for all mobiles. (4): Price per year (and rounded up to the nearest pound) if you choose the maximum lifetime of the product (5): Indicative delivery times that can be impacted by occasional disruptions. Consult the up-to-date situation of each supplier. (6): or 5 standard SANs (excluding the 3 first SANs of the certificate). All about wildcard SANs : FAQ |
The following certificates are recommanded by Microsoft to secure its Exchange and Communication Server Environments product. See http://support.microsoft.com/kb/929395.
SHA256 version | SHA256 option | SHA256 option | |
Brand | COMODO | THAWTE | SYMANTEC |
Products | UCC | Standard SGC EV |
Secure Site Secure Site EV Secure Site Pro Secure Site Pro EV |
Number of sites / FQDN / SAN included | 4 | - | - |
Reachable number of SANs | UNLIMITED | 24 | 24 |
Free reissue | Lifetime, including SAN changes | soumis à conditions | soumis à conditions |
Installable on how many machines? | UNLIMITED | UNLIMITED | 1 |
Logo Web included | - |
Wildcard SSL certificates enable you to secure multiple websites which share the same suffix: *.domain.com
Please note that you can only secure one level of sub-domains and that Wildcard certificates have some technical limitations.
SHA256 option | SHA256 version | SHA256 version | SHA256 option | ||||
Name | Thawte Wildcard | X509 Omnidomain TBS SHA1 | Comodo WildSSL SHA1 | Geotrust True BusinessID Wildcard | |||
---|---|---|---|---|---|---|---|
buy | buy | buy | buy | ||||
Price - 1 year | £290 | £326 | £270 | £317 | |||
Browsers recognition | 99.8% | 99% | 99% | 98% | |||
SERVICE INCLUDED | |||||||
Installable on how many machines? | UNLIMITED | 1 | UNLIMITED | UNLIMITED | |||
Price of add machine license | - | £17 | - | - | |||
Cipherment |
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
up to 256-bit
|
|||
Standards | X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, chained | X509v3, SSLv3, TLS, chained | |||
Free reissue |
Lifetime
|
Lifetime | Lifetime |
Lifetime
|
|||
Money back guarantee | 30 days | - | 30 jours | 30 days | |||
Average delivery time
|
2 business days | 3 business days | 2 business days | 5 business days | |||
Other | Secure with the sub-domain and without (just domain.com) | ||||||
Exists in wildcard SANs version | |||||||
Web logo included | |||||||
Warranty | $1 250 000 | $10 000 | $250 000 | $1 250 000 | |||
Data Sheet | |||||||
quote | quote | quote | quote | ||||
|
|||||||
(1): guarantee applicable for IE 5.01+, Netscape 4.77+, Mozilla/Firefox/SeaMonkey/Camino, Safari, Chrome, J2RE 1.6.0+. (2): guarantee applicable for IE 5.01+, Netscape 4.5+, Mozilla/Firefox/SeaMonkey/Camino, Safari, Chrome, J2RE 1.4.1+, Windows Mobile 6+. (3): guarantee applicable for IE 4.0+ (except for Windows 95 & 98), Netscape 4.0+, Mozilla/Firefox/SeaMonkey/Camino, Safari, Chrome, J2RE 1.3.0_02+, Windows mobile 6+. (4): garantee applicable for IE 7+, Netscape 8+, Mozilla 1.5+, Firefox / SeaMonkey / Camino, Safari 1.2+, Chrome, J2RE 1.5+ (5): Indicative delivery times that can be impacted by occasional disruptions. Consult the up-to-date situation of each supplier. (6): Within the limit of 6 reissuances. |
SHA256 option | SHA256 option | |
Nom | Thawte Developer | Symantec Code Signing |
---|---|---|
buy | buy | |
Price - 1 year | £138 | £401 |
Browsers recognition |
99.2%
|
97%
|
Nb of signables components | unlimited | unlimited |
Installable on how many machines? | -- | -- |
Standards | X509v3, Microsoft Authenticode, JDK (java), Adobe AIR, Netscape Code Signing | X509v3, Microsoft Authenticode, JDK (java), Microsoft driver, Windows 8, WinRT |
Free reissue |
Lifetime
|
Lifetime
|
Average delivery time
|
3/4 business days | 3 business days |
Money back guarantee | no | no |
Data Sheet | ||
Quote | quote | |
(1): guarantee applicable for IE 5.0+, Netscape 4.0+, Mozilla/Firefox/SeaMonkey/Camino and Safari browsers; JRE 1.3.0_02+, Office XP, Mac OS X. (2): guarantee applicable for IE 5.01+, Netscape 4.79+, Mozilla / Firefox / SeaMonkey / Camino, Safari; J2RE 1.4.2_06+, Office XP, Mac PS X. (3): Indicative delivery times that can be impacted by occasional disruptions. Consult the up-to-date situation of each supplier. (4): Within the limit of 6 reissuances. |
SHA256 version | SHA256 version | ||
Name | X509 Sign & Login TBS SHA1 |
X509 Email Particulier TBS SHA1 |
X509 Email Pro TBS SHA1 |
---|---|---|---|
buy | buy | buy | |
Price - 1 year | £27 | £29 | £43 |
Validation level (factor) | 2 (organization validated) | 2 (ID validated) | 2+ (ID and organization validated) |
Web and Email recognition |
97%
|
97%
|
97%
|
Usable for strong authentification? | √ | √ | √ |
Usable for digital signature? | √ | √ | √ |
Usable to sign and encipher email? | - | √ | √ |
Signed-PDF recognized by default in Acrobat Reader ? | no, configure it | no, configure it | no, configure it |
Usable to sign PDF (software required)? | √ | √ | √ |
Number of signature | Unlimited | Unlimited | Unlimited |
Free reissue | - | - | - |
Timestamp | √ | √ | √ |
Medium type | software | software | software |
Average delivery time
|
2/3 business days | 2/3 business days | 2/3 business days |
Standards | X509v3, chained | X509v3, S/MIME, chained | X509v3, S/MIME, chained |
Data Sheet | |||
Quote | Quote | Quote | |
All certs come with 40-bit warranty, up to 256-bit. (1): guarantee applicable for IE 5.01+, Netscape 4.77+, Mozilla/Firefox/SeaMonkey and Safari. (2): guarantee applicable for Outlook 2000+, Outlook Express 5.5+, Entourage, Mail MacOS X 10.3+, Thunderbird, Netscape 4.77+ and Mozilla/SeaMonkey. (3): To be configured. See our FAQ (4): Indicative delivery times that can be impacted by occasional disruptions. Consult the up-to-date situation of each supplier. |