启动SSL 2 类证书
StartSSL.com 似乎在销售廉价的 SSL 证书，但我想知道是否有人真正有使用他们的证书的经验。
StartSSL™ Verified StartSSL™ Verified（2 类）数字证书非常适合身份验证、B2B 和 B2C 交易、电子邮件保护以及目标代码和宏签名。不仅如此，StartSSL™ Verified 还提供了其他地方所没有的灵活性和支持选项。 StartSSL™ 验证支持： Web 服务器证书 (SSL/TLS) 通配符 (*.domain.com) 多个域（DNS 备用名称） 128/256位加密 目标代码签名 客户端和邮件证书 (S/MIME) 10,000 美元保险保障 证书有效期 2 年（730 天）
与他们共享个人护照信息和公司信息以获得个人/组织验证的证书是否安全？ （他们的网站看起来很糟糕，并且帮助电子邮件退回）
我对签名代码感兴趣，如果这也适用于网络服务器，那就太好了。
还有其他选择吗？
StartSSL.com seems to be selling cheap SSL certs, but I wonder if anyone actually have experience using their certs.
StartSSL™ Verified StartSSL™ Verified (Class 2) digital certificates are ideal for authentication, B2B and B2C transactions, protection of electronic mail and signing of object code and macros. More than that, StartSSL™ Verified provides a level of flexibility and support options not found anywhere else. StartSSL™ Verified supports:
Web server certificates (SSL/TLS)
Wild cards (*.domain.com)
Multiple domains (DNS Alt Names)
128/256-bit encryption
Object Code Signing
Client and mail certificates (S/MIME)
US $ 10,000 insurance guaranteed
Certificates 2 Years valid (730 days)
Is it safe to share personal passport information and company information with them for personal/organization validated certs?
(their website looks crapy and help email bouncing)
I am interested in signing code, and if that works for web server as well, that would be great.
Any other alternatives?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
2018 年 2 月编辑
正如其他人在评论中指出的那样，StartSSL 证书不再受浏览器信任，并且不再颁发。我建议您查看 Let's Encrypt。
原始答案
我刚刚和他们签约。提交护照后（为了以防万一，一些信息被涂黑），我几乎立即接到了代表的电话，想要核实一些信息。
没有发现任何有关它们可疑的信息，并且鉴于它们已被 Microsoft 接受为根 CA，我相信它们是合法的。
Edit in February 2018
As noted by others in the comments, StartSSL certificates are no longer trusted by browsers, and they are no longer issued. I recommend taking a look at Let's Encrypt instead.
Original answer
I just signed up with them. After submitting my passport (with some info blacked out, just in case) I got a call almost instantly from a representative wanting to verify some information.
Haven't found any info about them being shady, and given that they have been accepted as a root CA by Microsoft, I believe they are legit.