Given your donation to other projects being a big part of the endeavour, I think it would be good to show what your cost is, what the markup is and what ends up going to the other foundations. Although you don't have to put this up, I think it will help your conversion rate.
Is there anywhere in the site which lists what one should have before requesting the cert? Something like "have these documents at hand" (followed by a list of country-specific documents).
Certificates usually use the x509v3 object for 'Jurisdiction of Business Name' and this would point to the national / state level identifier. Ie, in the UK, Digicert looks up the company on Companies House and signs the UK company ID - the end-user doesn't supply the company ID, just the legal name, the verifying CA then checks the government authority to get the company ID. It would be similar in Brazil.
You can see the national company ID inside an EV cert from the browser, and also from openssl:
https://certsimple.com/blog/do-ev-ssl-certificates-have-bett...
One of the the things we're looking at is getting metrics on the parts that most people don't have, do better pre-arm people for verification.
That's backwards from what I'd expect. I'd expect to give the CNPJ, and the CA to get the company name from the government given the CNPJ.
- This is automatically in USD / EUR / GBP based on your IP location and country
- If you change the country it will update the pricing and also give you a local discount code
- I've added info on cert length to the front page too.
Clicking on "Get Started" scrolls up and expects me to start filling the form. Sleazy, very GoDaddy-ish, but OK, since it's on HN's frontpage, let's type in some junk and click the button -
{"err":"missing required field: preferredDonation"}
--
Single domain EV certificates are €429,
multi domain certificates are €699.
Both last two years.
> Clicking on "Get Started" scrolls up and expects me to start filling the form. Sleazy, very sleazy.
Hi there - the only way to 'Get started' getting an EV cert is to start collecting the info for the CSR. I have the same opinion of GoDaddy as you do - if there's something I can do better here I'm open to suggestions.
I've adjusted the code to always show the prices on the first step without the HN link. Originally I used the drop down banner at the top because the banner is animated and prominent, but since it doesn't show up if there's no coupon code, I've moved it to the main page.
Digicert provide the verification and support (we also provide our own in addition). Your CertSimple order ID is a valid Digicert order ID, and you can call Digicert and quote the order ID we give you. We just make the application process simpler.
What browser/OS are you using? I'm having trouble replicating the bug you encountered.
Great work btw, I'm sure when the time comes for me to need EV cert, I will remember this and won't be shopping around. I wish you great success in this endeavour.
Creator of Certsimple here. I made CertSimple while applying for and waiting 3 weeks for GoDaddy to issue an EV certificate earlier this year. I looked around for existing companes that could verify and issue certificates without the complex steps. Every company I looked at had a hugely detailed registration process or didn't sell EV certificates - the ones that actually check your identity (like github, mozilla, stripe, and npm sites).
The main difference with Certsimple is the amount of work you have to do to get a certificate.The whole process of applying of a cert with CertSimple is now less than a minute.
This is because:
- We build the entire CSR command, including the subject for both Linux/Unix and Windows. There are no questions and answers. Just paste onto your server (using openssl or libressl on Unix and certreq on Windows) and paste the results. - We set correct the defaults for 2015 browsers (Chrome 41+ is now showing warnings for SHA1 certificates) - We automatically set the required encryption strength for an EV cert (2048 bits) - We check the CSR as soon as you paste it - We're quite specific about the information we ask for, don't repeatedly ask for the same thing, and a few other bits and pieces.
You won't really notice any of this, though: you'll just find it's really easy.
The best way to experience this is to try it - it only takes a few seconds we don't ask for payment until the process is complete.
10% of the profit from our certificates goes to The OpenBSD Foundation, GnuPG, the EFF or Open Rights Group (you pick your preferred source at the end of the order).
Mike