Differences Between SSL Certificate Brands
There are differences across various dimensions between SSL certificate brands, and this article outlines the distinctions among brands.
Comparison of Mainstream Brands Available on Racent Platform
| Comparison Item | Root Certificate (Country/Region) | Root Certificate Description | Supported Algorithms | OCSP Signature Verification Node | Supported Certificate Types | Primary Target Customer Group | Price Range |
|---|---|---|---|---|---|---|---|
| sslTrus sslTrus | Sectigo (USA), Globalsign (Japan), Assecods X UniTrust (China) | International root/Domestic root (issued based on SHA2 root) | International algorithms: RSA, ECC Guomi (SM cryptography) algorithm: SM2 | Global (including domestic China), International | DV, OV, EV | Official websites of small and medium-sized enterprises, government, e-commerce and education industry websites | 198~ CNY 5600/year |
| Sectigo | Sectigo (USA) | International root (issued based on SHA2 root) | International algorithms: RSA, ECC | International | DV, OV, EV | Official websites of small and medium-sized enterprises | 790~ CNY 6980/year |
| Digicert (Symantec) | Digicert (USA) | International root (issued based on SHA2 root; some legacy certificates use SHA1 root) | International algorithms: RSA, ECC | International, domestic China (optional) | OV, EV | Finance, securities | 4000~ CNY 68000/year |
| Globalsign | Globalsign (Japan) | International root (issued based on SHA2 root) | International algorithms: RSA, ECC | Global (including domestic China) | DV, OV, EV | Primarily e-commerce | 2500~ CNY 13048/year |
| CFCA | CFCA (China) | International root/Domestic root (issued based on SHA2 root) | International algorithms: RSA, ECC Guomi (SM cryptography) algorithm: SM2 | International, domestic China (optional) | OV, EV | Finance, government, public utility institutions | 4900~ CNY 16000/year |
| GeoTrust (RapidSSL) | DigiCert (US) | Global root (issued based on SHA2 root; some older certificates use SHA1 root) | International algorithms: RSA, ECC | Global, domestic (optional) | DV, OV, EV | Official websites of small and medium-sized enterprises | CNY 496~ 7840/year |
| WoTrus | Sectigo (US), DigiCert (US) | Global root (issued based on SHA2 root) | International algorithms: RSA, ECC | Global, domestic (optional) | DV, OV, EV | Official websites of small and medium-sized enterprises, government institutions, etc. | CNY 318~ 32658/year |
Terminology
- Root certificate: Different brands are issued by different CAs, so their root certificates are different. Some domestically rebranded certificates are issued based on the root certificates of international brands.
- Supported algorithms: Certificates issued by international CAs mainly support international algorithms, such as RSA and ECC; some domestic CAs can issue both certificates with international algorithms and certificates with Guomi (SM cryptography) algorithms, which are mainly based on the SM2 algorithm.
- OCSP signature verification node: OCSP signature verification can ensure the authenticity and timeliness of certificate status information. The response speed of the certificate's OCSP server node has a certain impact on the certificate access speed.
- Supported certificate types: Most brands support issuing certificates of three validation types.
- Primary target customer group & price: Different brands have differences in market positioning, encryption level and other aspects, so their target customer groups are different.
- Price positioning: On the basis of meeting standard encryption functions, the price is also affected by factors such as brand positioning and encryption strength.
- Insurance coverage: Paid certificates from CA vendors are all covered by commercial insurance plans, and different products have different insurance coverage amounts.
Information
- Domestic roots do not support both international and Guomi (SM cryptography) algorithms at the same time