<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Tech[niques] &#187; digital certificate</title>
	<atom:link href="http://tech.niques.info/tag/digital-certificate/feed/" rel="self" type="application/rss+xml" />
	<link>http://tech.niques.info</link>
	<description>Technology applied to modern life</description>
	<lastBuildDate>Mon, 14 Jun 2010 11:27:47 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>Choosing the Best Free Digital Certificate for Securing Email</title>
		<link>http://tech.niques.info/choosing-free-digital-certificate/</link>
		<comments>http://tech.niques.info/choosing-free-digital-certificate/#comments</comments>
		<pubDate>Sat, 19 Jan 2008 00:34:23 +0000</pubDate>
		<dc:creator>Matt</dc:creator>
				<category><![CDATA[Review]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[digital certificate]]></category>
		<category><![CDATA[digital signature]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[S/MIME]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://tech.niques.info/choosing-free-digital-certificate/</guid>
		<description><![CDATA[Many digital certificate providers offer free certificates to secure your email.  I've reviewed 9 providers to help find the best certificate for you.]]></description>
			<content:encoded><![CDATA[Copyright © 2012 <a href="http://tech.niques.info">Tech[niques]</a>. Visit the original article at <a href="http://tech.niques.info/choosing-free-digital-certificate/">http://tech.niques.info/choosing-free-digital-certificate/</a>.<br /><div class="wlWriterEditableSmartContent" id="scid:0767317B-992E-4b12-91E0-4F059A8CECA8:3f356a28-5f6a-45d4-bcd1-c2f5a1cfdf80" style="padding-right: 0px; display: inline; padding-left: 0px; float: none; padding-bottom: 0px; margin: 0px; padding-top: 0px">Technorati Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></div>
<p>The internet is an incredibly convenient way to communicate.&#160; Unfortunately this convenience makes it easy to forget these communiqu&#233;s are not inherently secure.&#160; A malicious user has many opportunities to tap into or modify this information stream as it goes whizzing past.</p>
<p>Thankfully most modern email clients, and some IM clients, have capabilities built in to allow us to guarantee communications remain private and free from interference.&#160; S/MIME (and <abbr title="Public Key Infrastructure" style="border-bottom: navy 1px dotted">PKI</abbr>) are the foundation for this and provide a way to ensure what is received is exactly what was sent (via a digital signature), and keep the conversation private (via encryption).&#160; Before we can use this functionality we first need to obtain a digital certificate.&#160; To quote <a title="S/MIME" href="http://en.wikipedia.org/wiki/S/MIME" target="_blank" rel="tag">wikipedia</a>:</p>
<blockquote>
<p>Before S/MIME can be used in any of the above applications, one must obtain and install an individual key/certificate either from one&#8217;s in-house <a href="http://en.wikipedia.org/wiki/Certificate_authority">certificate authority</a> (CA) or from a public CA. &#8230; Encryption requires having the destination party&#8217;s certificate on store (which is typically automatic upon receiving a message from the party with a valid signing certificate).</p>
<p>A typical basic personal certificate verifies the owner&#8217;s identity <i>only</i> in terms of binding them to an email address and does not verify the person&#8217;s name or business. The latter, if needed (e.g. for signing contracts), can be obtained through CAs that offer further verification (digital notary) services or managed PKI service.</p>
</blockquote>
<p>Digital certificates can also have other uses such as verifying your (client) identity to a web site, or digitally signing code.</p>
<p>There are a number of sources of free digital certificates available but they can be difficult to locate and near impossible to compare features without ordering and trying each certificate.&#160; To resolve this impasse I&#8217;ve performed a comparative review of 9 different certificate authorities to see which is offering the best free digital certificates for typical needs.</p>
<p>The services were picked from those mentioned on the <a title="certifi.ca OpenID provider" href="http://certifi.ca" target="_blank">certifi.ca OpenID provider</a>&#8216;s website, <a title="Mozilla&#39;s knowledge base" href="http://kb.mozillazine.org/Getting_an_SMIME_certificate" target="_blank">Mozilla&#8217;s knowledge base</a>, <a title="DMOZ" href="http://www.dmoz.org/Computers/Security/Public_Key_Infrastructure/PKIX/Tools_and_Services/Third_Party_Certificate_Authorities/" target="_blank">DMOZ</a> and the first 50 hits from a search on Google. For each of the CAs I used Firefox 2 to request, download and install the available certificate.&#160; The certificate was examined within Firefox before using the <a title="certifi.ca OpenID provider" href="http://certifi.ca" target="_blank">certifi.ca</a> site to determine whether it could also be used for client authentication.</p>
<p><strong>After reviewing the options I&#8217;d recommend:</strong></p>
<ul>
<li><strong>Signing up for a CACert certificate because of the range of features available, including a verified Class 3 certificate.&#160; If (when?) it is included in Firefox 3 adoption of this CA should pickup markedly.&#160; Your support can only help with the CA&#8217;s mass market adoption. </strong></li>
<li><del datetime="2009-12-18T13:04:34+00:00">Also signing up for a thawte certificate.&#160; Verifying this identity will help you obtain a verified CACert certificate, and this can also be a backup for any sites that are yet to be configured to accept CACert&#8217;s root certificate.</del><strong><i><u>Update</u>: Unfortunately Thawte have ceased to offer their Freemail certificates as at November 2009.</i></strong></li>
</ul>
<p>None of the other options provided any benefits beyond those available through CACert <del datetime="2009-12-18T13:04:34+00:00">and thawte</del>, so there is no need to resort to using the lesser or unknown CA&#8217;s also providing free certificates.&#160; I also don&#8217;t see any need to pay for a verified digital identity certificate (e.g. from Verisign) when quality options such as <del datetime="2009-12-18T13:04:34+00:00">thawte and</del> CACert are available at no cost.&#160; Detailed reviews are provided below, in order of preference, so you can verify these recommendations for yourself.&#160;</p>
<p>So what are you waiting for?&#160; Install a free digital certificate today, and start enjoying a more secure internet!&#160;</p>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="http://www.cacert.org/">CACert Email Accounts and Client Certificates</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">5</span>/<span class="best">5</span></span></p>
<div class="summary">CACert is a community CA that quickly provisions unverified (Class 1) certificates suitable for encryption, signing and browser authentication for both business and personal use.&#160; It offers a free way to upgrade to an identity verified (Class 3) certificate, and free SSL server and code signing certificates are also available.&#160; CACert is working with Mozilla to have its root certificate included in the Firefox 3 release.</div>
<p><span class="label">Review:</span></p>
<div class="description">
<p>The provisioning process was quick and painless but did require some manual configuration.&#160; The root certificate was not included in Firefox 2 and had to be manually installed.&#160; CACert is currently working to get these included in Firefox 3 when it is released.</p>
<p>A basic, business and personal use Class 1 certificate was available immediately.&#160; This is usable for encryption, signing and browser authentication.&#160; Users can then choose to have their identity verified through a free Web of Trust points based system to gain a Class 3 certificate.&#160; The WoT network is not as advanced as thawte&#8217;s (e.g. only 1 notary within 30 minutes drive of my current location) but they do give you points for a verified thawte identity so this is not as big an issue as it first appears.&#160; You also have a Trusted Third Party option if WoT doesn&#8217;t adequately cover your area.&#160; Certificates for SSL server use and code signing are also available, though the code signing certificates (justifiably) have higher identity verification requirements.</p>
<table cellspacing="0" cellpadding="2" width="510" border="0">
<tbody>
<tr>
<th valign="top" width="198">Certificate&#8217;s Identification (CN)</th>
<td valign="top" width="310">
<p>CAcert WoT User</p>
<p><em>(Identity listed if verified)</em></p>
</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (CN)</th>
<td valign="top" width="310">CA Cert Signing Authority</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (O)</th>
<td valign="top" width="310">Root CA</td>
</tr>
<tr>
<th valign="top" width="198">Acceptable Usage</th>
<td valign="top" width="310">Business/Personal</td>
</tr>
<tr>
<th valign="top" width="198">Option to Verify Identity?</th>
<td valign="top" width="310">Yes, via <a title="Web of Trust" href="http://en.wikipedia.org/wiki/Web_of_trust" target="_blank" rel="tag">Web of Trust</a></td>
</tr>
<tr>
<th valign="top" width="198">Install Root Certificates?</th>
<td valign="top" width="310">Not installed in Firefox 2</td>
</tr>
</tbody>
</table>
</div>
<p>Ratings: <span class="rating"><a href="http://en.wikipedia.org/wiki/Usability" rel="tag">Usability: 4/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Security" rel="tag">Security: 5/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Features" rel="tag">Features: 5/<span class="best">5</span></a></span></p>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2134+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><del datetime="2009-12-18T13:04:34+00:00"><a class="url fn" href="http://www.thawte.com/secure-email/personal-email-certificates/index.html">thawte&#8217;s Personal Email Certificate</a></del></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">4</span>/<span class="best">5</span></span></p>
<div class="summary"><del datetime="2009-12-18T13:04:34+00:00">thawte is a mainstream CA that quickly provisions unverified (Class 1) certificates suitable for email encryption, signing and browser authentication, and offers a free way to upgrade to an identity verified certificate.</del><i><strong><u>Update</u>: Unfortunately Thawte have ceased to offer their Freemail certificates as at November 2009.</strong></i></div>
<p><span class="label">Review:</span></p>
<div class="description">
<p>The provisioning process was quick and painless, with all relevant root certificates already installed within the browser so no additional configuration was required.</p>
<p>A basic, personal use Class 1 certificate was available immediately.&#160; This is usable for encryption, signing, and browser authentication.&#160; Users can then choose to have their identity verified through a free Web of Trust points based system, which is a pre-requisite for adding your name to the certificate.&#160; thawte&#8217;s WoT network was the most complete out of all those reviewed (e.g. 5 notaries are within a 30 min drive of my current location) and a Trusted Third Party option is available if your area isn&#8217;t supported as well as mine.&#160; Certificates for business use or code signing capabilities are available for a fee.</p>
<table cellspacing="0" cellpadding="2" width="510" border="0">
<tbody>
<tr>
<th valign="top" width="198">Certificate&#8217;s Identification (CN)</th>
<td valign="top" width="310">
<p>Thawte Freemail User</p>
<p><em>(Identity listed if verified)</em></p>
</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (CN)</th>
<td valign="top" width="310">Thawte Personal Freemail Issuing CA</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (O)</th>
<td valign="top" width="310">Thawte Consulting (Pty) Ltd</td>
</tr>
<tr>
<th valign="top" width="198">Acceptable Usage</th>
<td valign="top" width="310">Personal</td>
</tr>
<tr>
<th valign="top" width="198">Option to Verify Identity?</th>
<td valign="top" width="310">Yes, via <a title="Web of Trust" href="http://en.wikipedia.org/wiki/Web_of_trust" target="_blank" rel="tag">Web of Trust</a></td>
</tr>
<tr>
<th valign="top" width="198">Install Root Certificates?</th>
<td valign="top" width="310">Preinstalled in Firefox 2</td>
</tr>
</tbody>
</table>
</div>
<p>Ratings: <span class="rating"><a href="http://en.wikipedia.org/wiki/Usability" rel="tag">Usability: 5/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Security" rel="tag">Security: 5/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Features" rel="tag">Features: 4/<span class="best">5</span></a></span></p>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2131+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="https://www.startssl.com/">StartSSL&#8482; Free (Class 1) Digital Certificates</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">4</span>/<span class="best">5</span></span></p>
<div class="summary">StartSSL is a lesser known CA that quickly provisions unverified (Class 1) certificates suitable for encryption and signing for both business and personal use, and offers a free way to upgrade to an identity verified certificate.&#160; Free SSL server and other certificates are also available.</div>
<p><span class="label">Review:</span></p>
<div class="description">
<p>The provisioning process was very quick (its required to log into the management UI) but did require some manual configuration.&#160; The root certificate appeared to be present but an intermediary certificate was missing and had to be installed.&#160; The management interface is a little buggy but nothing that can&#8217;t be resolved by re-attempting a failed operation.</p>
<p>A basic, business and personal use Class 1 certificate was available immediately.&#160; This is usable for encryption and digital signing, but wasn&#8217;t recognised during browser authentication tests with any site other than StartSSL.&#160; Users can then choose to have their identity verified through a free Web of Trust points based system, but the WoT network is just starting up (e.g. there are no notaries in my state) so you will likely have to resort to the Trusted Third Party option instead.&#160; Certificates for SSL server use and code signing are also available, as are paid certificates if you are using certificates for significant business purposes.</p>
<table cellspacing="0" cellpadding="2" width="510" border="0">
<tbody>
<tr>
<th valign="top" width="198">Certificate&#8217;s Identification (CN)</th>
<td valign="top" width="310">
<p>StartCom Free Certificate Member</p>
<p><em>(O=Firstname Lastname)</em></p>
</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (CN)</th>
<td valign="top" width="310">StartCom Class 1 Primary Intermediary Client CA</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (O)</th>
<td valign="top" width="310">StartCom Ltd</td>
</tr>
<tr>
<th valign="top" width="198">Acceptable Usage</th>
<td valign="top" width="310">Business/Personal</td>
</tr>
<tr>
<th valign="top" width="198">Option to Verify Identity?</th>
<td valign="top" width="310">Yes, via <a title="Web of Trust" href="http://en.wikipedia.org/wiki/Web_of_trust" target="_blank" rel="tag">Web of Trust</a></td>
</tr>
<tr>
<th valign="top" width="198">Install Root Certificates?</th>
<td valign="top" width="310">
<p>Partially installed in Firefox 2</p>
<p><em>(missing intermediary certificate)</em></p>
</td>
</tr>
</tbody>
</table>
</div>
<p>Ratings: <span class="rating"><a href="http://en.wikipedia.org/wiki/Usability" rel="tag">Usability: 3/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Security" rel="tag">Security: 5/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Features" rel="tag">Features: 5/<span class="best">5</span></a></span></p>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2133+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="http://www.comodo.com/products/certificate_services/email_certificate.html">Comodo Personal Email Certificate</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">3</span>/<span class="best">5</span></span></p>
<div class="summary">Comodo is a mainstream CA that quickly provisions unverified (Class 1) certificates suitable for email encryption and signing</div>
<p><span class="label">Review:</span></p>
<div class="description">
<p>The provisioning process was quick and painless, with all relevant root certificates already installed within the browser so no additional configuration was required.</p>
<p>A basic, personal use Class 1 certificate was the only free option available.&#160; This is usable for encryption, and signing.&#160; Certificates for business use, verification of identity, ability to authenticate with a website, or code signing are available for a fee.</p>
<p>Comodo Personal Email Certificates also appear to be resold by <a title="InstantSSL" href="http://www.instantssl.com/ssl-certificate-products/free-email-certificate.html" target="_blank">InstantSSL</a>, and <a title="Wosign (Asian language specialist)" href="http://www.wosign.com/english/Free_Personal_Client_Cert.htm" target="_blank">Wosign (Asian language specialist)</a>.</p>
<table cellspacing="0" cellpadding="2" width="510" border="0">
<tbody>
<tr>
<th valign="top" width="198">Certificate&#8217;s Identification (CN)</th>
<td valign="top" width="310"><em>Firstname Lastname</em></td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (CN)</th>
<td valign="top" width="310">The USERTRUST Network</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (O)</th>
<td valign="top" width="310">UTN-USERFirst-Client Authentication and Email</td>
</tr>
<tr>
<th valign="top" width="198">Acceptable Usage</th>
<td valign="top" width="310">Personal</td>
</tr>
<tr>
<th valign="top" width="198">Option to Verify Identity?</th>
<td valign="top" width="310">No</td>
</tr>
<tr>
<th valign="top" width="198">Install Root Certificates?</th>
<td valign="top" width="310">Preinstalled in Firefox 2</td>
</tr>
</tbody>
</table>
</div>
<p>Ratings: <span class="rating"><a href="http://en.wikipedia.org/wiki/Usability" rel="tag">Usability: 5/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Security" rel="tag">Security: 3/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Features" rel="tag">Features: 3/<span class="best">5</span></a>; </span></p>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2130+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="http://www.trustcenter.de/en/products/tc_internet_id.htm">TC TrustCenter TC Internet ID</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">3</span>/<span class="best">5</span></span></p>
<div class="summary">Trustcenter is a lesser known CA that quickly provisions unverified (Class 1) certificates suitable for encryption, signing and browser authentication</div>
<p><span class="label">Review:</span></p>
<div class="description">
<p>The provisioning process was quick but did require some manual configuration.&#160; The root certificate appeared to be present but an intermediary certificate was missing and had to be installed.</p>
<p>A basic, personal use Class 1 certificate was the only free option available.&#160; This is usable for encryption, signing, and browser authentication.&#160; Certificates for business use, verification of identity, or code signing are available for a fee.</p>
<table cellspacing="0" cellpadding="2" width="510" border="0">
<tbody>
<tr>
<th valign="top" width="198">Certificate&#8217;s Identification (CN)</th>
<td valign="top" width="310"><em>Firstname Lastname</em></td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (CN)</th>
<td valign="top" width="310">TC TrustCenter Class 1 L1 CA III</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (O)</th>
<td valign="top" width="310">TC TrustCenter GmbH</td>
</tr>
<tr>
<th valign="top" width="198">Acceptable Usage</th>
<td valign="top" width="310">Personal</td>
</tr>
<tr>
<th valign="top" width="198">Option to Verify Identity?</th>
<td valign="top" width="310">No</td>
</tr>
<tr>
<th valign="top" width="198">Install Root Certificates?</th>
<td valign="top" width="310">
<p>Partially installed in Firefox 2</p>
<p><em>(missing intermediary certificate)</em></p>
</td>
</tr>
</tbody>
</table>
</div>
<p>Ratings: <span class="rating"><a href="http://en.wikipedia.org/wiki/Usability" rel="tag">Usability: 4/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Security" rel="tag">Security: 3/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Features" rel="tag">Features: 3/<span class="best">5</span></a></span></p>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2136+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="http://www.aloaha.com/wi-software-en/aloaha-pki.php">Aloaha PKI Free Personal Certificate</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">2</span>/<span class="best">5</span></span></p>
<div class="summary">Aloaha is an unknown CA that quickly provisions unverified (Class 1) certificates suitable for encryption and signing</div>
<p><span class="label">Review:</span></p>
<div class="description">
<p>The provisioning process was quick but did require some manual configuration.&#160; The root certificate was missing and had to be installed.&#160; Once the root certificate was installed there still seemed to be some intermediary certificates missing so the full trust chain could not be verified.&#160; The certificates are issued by Microsoft Certificate Server and the website claims to be IE only, but worked OK with Firefox 2.</p>
<p>A basic, personal use Class 1 certificate was the only free option available.&#160; This is usable for encryption, and signing.&#160; If you send a signed email to the support address they will provide you with a code signing certificate without further proof of your identity, which is a little disconcerting.&#160; Certificates for business use, verification of identity, or ability to authenticate with a website are available for a fee.</p>
<table cellspacing="0" cellpadding="2" width="510" border="0">
<tbody>
<tr>
<th valign="top" width="198">Certificate&#8217;s Identification (CN)</th>
<td valign="top" width="310"><em>Firstname Lastname</em></td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (CN)</th>
<td valign="top" width="310">Wrockiage Intermedia GmbH</td>
</tr>
<tr>
<th valign="top" width="198">Certifying Authority (O)</th>
<td valign="top" width="310">Wrockiage Intermedia GmbH</td>
</tr>
<tr>
<th valign="top" width="198">Acceptable Usage</th>
<td valign="top" width="310">Personal</td>
</tr>
<tr>
<th valign="top" width="198">Option to Verify Identity?</th>
<td valign="top" width="310">No</td>
</tr>
<tr>
<th valign="top" width="198">Install Root Certificates?</th>
<td valign="top" width="310">Not installed in Firefox 2</td>
</tr>
</tbody>
</table>
</div>
<p>Ratings: <span class="rating"><a href="http://en.wikipedia.org/wiki/Usability" rel="tag">Usability: 3/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Security" rel="tag">Security: 2/<span class="best">5</span></a></span>, <span class="rating"><a href="http://en.wikipedia.org/wiki/Features" rel="tag">Features: 3/<span class="best">5</span></a></span></p>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2137+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="http://www1.wisekey.com/myidentity/">WiseKey CertifyID Free Certificate</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">0</span>/<span class="best">5</span></span></p>
<div class="summary">The provisioning process is currently broken.&#160; The verification email link appeared to verify my request but the provisioning workflow did not continue past that point, and there appeared no way to work around this via the website.</div>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2138+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="http://www.ascertia.com/OnlineCA/faq.aspx?linkID=40">Ascertia Free Digital Certificate</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">0</span>/<span class="best">5</span></span></p>
<div class="summary">The provisioning process is currently broken.&#160; The verification email wasn&#8217;t received and the website provided no way to resend it.</div>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2139+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<p>&#160;</p>
<div class="hreview">
<h2><abbr class="type" title="product">Product</abbr>: <span class="item"><a class="url fn" href="http://certs.ipsca.com/Products/SMIME.asp">ipsCA Personal E-mail Certificates</a></span></h2>
<p><span class="label">Overview:</span> <span class="rating"><span class="value">0</span>/<span class="best">5</span></span></p>
<div class="summary">The provisioning process is currently broken.&#160; The verification email wasn&#8217;t received and the website provided no way to resend it.</div>
<div class="footer">
<p>Tags: <a href="http://technorati.com/tags/Digital%20Certificate" rel="tag">Digital Certificate</a>,<a href="http://technorati.com/tags/Digital%20Signature" rel="tag">Digital Signature</a>,<a href="http://technorati.com/tags/Identity" rel="tag">Identity</a>,<a href="http://technorati.com/tags/S/MIME" rel="tag">S/MIME</a></p>
<p><a href="http://tech.niques.info/choosing-free-digital-certificate/" rel="self bookmark">Review</a> (<a href="http://microformats.org/wiki/hreview">hReview v<span class="version">0.3</span></a>) by <span class="reviewer vcard"><a class="url fn" href="http://tech.niques.info">Tech[niques]</a></span>, <abbr class="dtreviewed" title="20080117T2140+11:00">17 Jan, 2008</abbr>. <a href="http://creativecommons.org/licenses/by-nc-sa/2.5/au/" rel="license">CC 2.5 AU</a></p>
</div>
</div>
<script type="text/javascript">
  addthis_url    = 'http%3A%2F%2Ftech.niques.info%2Fchoosing-free-digital-certificate%2F';
  addthis_title  = 'Choosing+the+Best+Free+Digital+Certificate+for+Securing+Email';
  addthis_pub    = 'DawMatt';
</script><script type="text/javascript" src="http://s7.addthis.com/js/addthis_widget.php?v=12" ></script>
]]></content:encoded>
			<wfw:commentRss>http://tech.niques.info/choosing-free-digital-certificate/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>

