Hacker News Reader

Wow, StartSSL will give me a free certificate that browsers accept without bugging the user? Are there any downsides to this?

Is that possible for the whole domain, so that when I get a cert for mydomain.com it also works for development.mydomain.com etc? Even when development.mydomain.com has a different IP then mydomain.com?

View on HN

The major downside I know is that in case your private key is compromised and you want to revoke the certificate, you have to pay $24.90.

> Even though StartSSL™ provides certificates generally free of charge, revocations thereof may carry a handling fee. Take great care of your private keys, save and backup all files all the time!

See more on https://www.startssl.com/?app=37

WoSign[0] do free revok and will give you up to 100 altnames. Failing that I'd rather pay $10 for a cert from somewhere else, or pay a premium for my domain at Gandi and get a cert thrown in.

[0] https://buy.wosign.com/free/

Reply on news.ycombinator.com