What Certificate provider do you use?

[PeterUK]

So my view about Certificates and 47 days

So not sure how many agree with what Steve said and other peoples view but yes I do agree Certificates being cut to 47 days should it happen if no push back is terrible!

So I used to use zerossl on there Basic plain and I'm sure the free plan did at one point do unlimited 90-Day Certificates but I think they changed that due to the up coming 47 days another way to get 90-Day Certificates is here.

Educating the public about SSL Certificates | SSL.com

At SSL.com, our vision is to create public awareness on the importance of SSL Certificates. Have questions? Post them on our Facebook wall using the link above and we will do our best to respond to your comments as soon as possible.

secure.ssl.com

I believe Steve said he move to this Certificate provider?

https://cheapsslweb.com

which I would of used but would like to use paypal

I since cut ties with zerossl due to how Multi-Domain Certs works which would of put me on the Premium plan and thats just too much so I now use

Affordable SSL Certificates from $7.66/yr - SSL Dragon

Buy affordable SSL certificates. Enjoy fast issuance, 99% browser trust, strong encryption, and a 25-day money-back guarantee.

www.ssldragon.com

and with my no-ip Subscription get free Certs plus some RapidSSL Basic DV that where 70% off I now save I bit by moving away from zerossl.

Steve was saying how he could not work out why Certs are going to be reduced to 47 days so here is my theory, what if a attacker some how points say example.com to their IP briefly such that they could get a 1 year Cert then give control of example.com back under the correct IP wouldn’t this be a problem? if the attacker has control of a client user system DNS to point example.com to the attacker site that their Cert would be valid and you would not know?

 

[ABSG]

I think is simpler... Certificate revocation does not work and somebody in the know does know.

A recent example is Fina CA, a little‑known certificate authority, improperly issued 12 unauthorized TLS certificates for Cloudflare’s public DNS resolver IP 1.1.1.1 between February 2024 and August 2025 for "internal testing". These certificates were discovered through Certificate Transparency logs and raised concerns because Microsoft Windows trusted the Fina Root CA, meaning the misissued certs would have been automatically trusted on Windows. No evidence the certificates were used ever maliciously used but if they had fallen into the wrong hands the Cert could have enabled impersonation of Cloudflare’s DNS-over-HTTPS or DNS-over-TLS endpoints.

By reducing the life time to 47 days is makes the certificates expire way quicker and a oops moment is now just a blip! I think their is a good possibility, If/when that rule goes live, it will force organizations to rotate certificates roughly twice as often in the short term. Historically, every time the industry tightens these rules, a wave of outages follows because someone, somewhere, forgets to automate renewal. I am about ready for 47 Days now! Let' go and Encrypt!