Are all SSL domain validation basically the same technically speaking?

2018-10-22 20:57:14

I've googled this and haven't really been able to find a straight answer and this question which I have read is a bit different and is a bit outdated considering the landscape has changed a lot recently.

What I want to know, is if you aren't planning to get a OV or EV certificate and just need the plain DV type certificate then we have offerings of varying types, such as:

Free Certificates from places such as Let's Encrypt

Many hosts are giving away free certificates now with their hosting (not always by Let's Encrypt)

AutoSSL from cPanel (Free)

$198 Standard SSL certs from DigiCert

$59 Standard Certs from RapidSSL

I could go on, but you get the point. Is there any technical difference between these certificates? From what I have read certificates from LE only last 3 months so you will have to renew them quite often - is that about it?

If there is no real difference then why not go with the free ones provided by cPanel? Why would one spend $198/year when they can ge

  • "If there is no real difference then why not go with the free ones provided by cPanel?"

    Use this interface to install an SSL certificate on a domain, subdomain, or addon domain. Before you can use this feature, you must create or purchase a certificate, and you must possess the certificate's key.

    Directly from cPanel's website it looks like you MUST either purchase a cert, or you can use one cPanel provides, but that MAY be a self-signed certificate. Without seeing what is offered by cPanel, I have no way of guaranteeing what cPanel is offering is a CA signed certificate.

    If you choose the free certificate from cPanel, it will tell you if it is of the self-signed variety:

    When you install a certificate, this interface indicates whether your certificate is self-signed. Self-signed certificates are easy targets for attackers and generate security warnings in your users’ web browsers. Only install a self-signed certificate temporarily, until you can replace the certificate wi

    2018-10-22 21:31:42