I'm the founder of a little non-profit French organization.

Currently, we're providing free web and shell hosting. Talking about that, is there a way to become a Trusted Certificate Authority, in order to give free SSL certificates to my customers, but also to avoid being an intermediate (and pay a lot for that), and/or avoid paying a lot for each certificate...

Thank you for your help.

link|improve this question
1  
It is not hard to become a Certificate Authority. The tricky part is Trusted. – rene Mar 1 '11 at 21:37
Exactely =) and the question is how to become trusted ^^ - Any idea? – Max13 Mar 1 '11 at 21:41
feedback

migrated from stackoverflow.com Mar 1 '11 at 21:45

This question came from our site for professional and enthusiast programmers.

1 Answer

I suspect you will find that it is too expensive to do so in terms of auditing requirements. Also, there is no single definition of what it means to be trusted. Each application is free to define their own trust, and to use their own root certificates. Practically speaking, you may only care about getting your CA certificate in the Windows root certificate program, in the Mozilla program, in the Java cacerts file, Opera, and maybe a few smaller ones. I think Chrome uses either Windows root certs or the Mozilla root certs.

Mozilla just issued a new policy for CAs.

Here a few link to articles about Microsoft's program:
Microsoft Root Certificate Program
Windows root certificate program members
Microsoft Root Certificate Program Members

Here is an article on getting into Opera's root certificates.

link|improve this answer
Here is Apple's policy too: apple.com/certificateauthority/ca_program.html – Bruno Mar 21 at 19:04
feedback

Your Answer

 
or
required, but never shown