Don't Buy Chained Certificates - Insist On Single Root

When connecting to a web server over SSL, the visitor's browser decides whether or not to trust the SSL Certificate based on which Certification Authority has issued the actual SSL Certificate. To determine this, the browser looks at its list of trusted issuing authorities - represented by a collection of Trusted Root CA Certificates added into the browser by the browser vendor (such as Microsoft and Netscape).

We Only Issue Highly Trusted SSL Certificates

Most SSL Certificates are issued by Certification Authorities who own and use their own Trusted Root CA Certificates, such as those issued by GeoTrust. As GeoTrust is known to browser vendors as a trusted issuing authority, its Trusted Root CA Certificate has already been added to all popular browsers, and hence is already trusted. These SSL Certificates are known as Single Root SSL Certificates.

Some Companies Issue Inferior SSL Certificates

Some Certification Authorities do not have a Trusted Root CA Certificate present in browsers, or do not use the root they do own, and use a Chained Root in order for their SSL Certificates to be trusted. Essentially a Certification Authority with a Trusted Root CA Certificate issues a Chained Certificate which inherits the browser recognition of the Trusted Root CA. These SSL Certificates are known as Chained Root SSL Certificates.

Single Root Is A Sign Of Stability And Trust

For a Certification Authority to have and use its own Trusted Root CA Certificate already present in browsers is a clear sign that they are long-time, stable and credible organizations who have long term relationships with the browser vendors (such as Microsoft and Netscape) for the inclusion of their Trusted Root CA Certificates. For this reason, such Certification Authorities are seen as being considerably more credible and stable than chained root certificate providers who do not have a direct relationship with the browser vendors, or do not use their own root certificates to issue SSL Certificates.

You can view the Certification Authorities who have and use their own root certificates by viewing the list in your browser.

Chained Root Certificates Are Harder To Install

Chained Root certificates require additional effort to install as the web server must also have the Chained Root installed. This is not necessary for our Single Root certificates.

Current Known Chained SSL Issuers

We have provided a list of the Chained Root SSL Certificate issuers that we are aware of.

Please Contact Us if you would like us to clarify if a company that is not listed is offering Chained Root products.