Need SSL Certificate Recomendations

[Stoic Joker]

Greetings
  I've been using a Start.com/Start SSL for our Exchange server, but the renewal process is a nightmare. I really don't have time to waste gathering up and submitting a bunch of prove it's me/us documentation every time the cert expires. Is suffering through these types of shenanigans "normal" for SSL cert renewal?? Or is there some place that I can just pay a renewal fee and get the damn thing extended.

  Why does everything to do with SSL have to suck so ridiculously hard?? I swear they had to have been created by the DMV!

[mouser]

I can only commiserate -- the ssl certificate renewal process at StartSSL is painful and confusing and feels like it's from an alternate dystopian dimension.. It's still what I use though, because of price.
If you find something better at a reasonable price, let me know.

[Renegade]

I can sympathise with the misery of dealing with certificates. Not fun.

In reality, it's just a big scam.

[Stoic Joker]

Shit. I was hoping you guys had a viable alternative. I just don't know what kind of crazy assed hoops the next guy is going to want to put me through. So with my luck -(with SSL)- the odds of going from the frying pan to the fire are ~50/50. I'd love to find one that would issue a 20 year certificate...so I never ever have to suffer through this inane nonsense ever again.

Christ, every time you turn around there is yet another huge gaping assed hole in the damn thing (like the latest Apple/Google 'FREAK' Attack Security Vulnerability). And even on the rare good days the NSA (et al.) has turned it into nothing more than a sad joke anyway.

[Shades]

Self-signed, perhaps? At least you can make these last 10 years...

Or is it for the company and it's clients. Because for internal use only, I wouldn't be bothered too much about makin' me some certificates


(it is bad to make such long lasting ones...I am familiar with the do's and don'ts)

[Renegade]

Self-signed, perhaps? At least you can make these last 10 years...

Or is it for the company and it's clients. Because for internal use only, I wouldn't be bothered too much about makin' me some certificates

Agreed there. Self-signed is a good option for internal use - it's what I do. The only thing is that you need to trust yourself.

I do get popups in Outlook regarding my cert, but it's not an issue - I just click OK. Also, that only happens once when I start Outlook - it doesn't happen every time Outlook polls for new email.

[Stoic Joker]

SS is not an option as this is for public facing production systems. If it was for the internal systems I wouldn't even bother with the annoying theatrical nonsense. It just baffles me beyond reason why everything to do with SSL has to be so god damn complicated. If the point of the certificate is to validate me...then it should trust the me it is validating to renew the silly thing without having to go through a bunch of horse shit to yet again confirm that I am indeed still the me that I was when I was being me last time.

I mean FFS if they can't even trust the validity of their own certificate to ensure that the me that is posing as I is truly the as to be certified me ... Then what good is the damn thing!

[Renegade]

Ok... just for laughs...

I'm working on an access security system for a client, and in the documentation they say that users can use the certificate that they provide. Mind you, it's supposed to be on a local network, but still...