Is Comodo a Certificate Authority?
From Comodo's SSL server cert page: SSL Server Certificates are self-signed certificates used to secure any website using SSL.
Self-signed certificates are the industry standard method of securing websites, as they have none of the problems that can be associated with third-party certificates, such as CA/Browser Certification Authority (CAA) trust problems, or being restricted to a single domain.
The first thing that pops into my mind is, "Are these certificates trusted?" My first thought, without even having looked into it, is that these self-signed certificates should be trusted because the author is clearly a CAnd if a CA claims that they are self-signed, shouldn't the user trust them and accept them? After some research, I found this web page where it claims that Comodo is a CIt also says, "The list of authorities we trust is not an exhaustive list of all CAs that can be trusted." Does that mean that Comodo does not trust itself? Is Comodo really a Certificate Authority? As stated above, the first thing that comes to mind is whether Comodo is a CThe reason for this is that it is one of the biggest CAs in the world and it is the one we use, but what if the company is actually a Certificate Authority? To answer this, let's look at the certificate first, which is a signed X.509 certificate. A digital signature is an electronic way of proving someone's identity. So, in order to be considered a CA, a certificate has to have the following properties.
Signed by an authority (in other words, the issuer). This certificate is meant to be used to verify the identity of the person or entity represented by the certificate. In other words, the issuer of the certificate (the CA) is supposed to be who they say they are.
So, if this certificate is meant to be signed by another authority, it would have to be signed by a CA that Comodo has listed as a trusted authority. Which certificate was signed by Comodo? It is the second certificate that is shown here on the page.
The question is, if a CA is listed as a trusted authority, is that certificate trusted? Well, in my opinion, this certificate is not trusted.
How do I get a Comodo certificate?
A Comodo certificate is the digital symbol that confirms to customers that your website was built using a secure and trusted Internet service provider.
Customers also need to trust the certificate because not all certificate authorities are trusted by all customers.
If a certificate authority has not been trusted by your organization, you can import that certificate to your browser or email client for validation. For more information about certificate authorities, contact us.
Why should I get a Comodo certificate? There are several reasons why we recommend you get a Comodo certificate: You are opening your site to customers from all around the globe. Your customers may access your site over unsecured wireless connections such as 3G. Comodo certificates are supported by all major browsers including Internet Explorer, Chrome, Firefox and Opera. When a customer visits your site, they will be prompted to download a free Comodo certificate from the official Comodo website. Once they have accepted the certificate, they will be able to access your site using the public key of your Comodo certificate.
To get your Comodo certificate: Choose "Get Comodo Certificate" from your certificate options. Enter your organization's name and e-mail address. Download the certificate. Download the file by clicking "Download to Files". Once the file has downloaded, right click it and select "Save As". Right click on the file, go to "Open". On the bottom of the "certificate information" window, check if "Keep me signed in" is enabled. If it is, you will need to logout of your account before you can complete the request.
Your certificate issued immediately. The Comodo team will contact you and send your certificate and Comodo Public Key. Why is Comodo asking for my contact details? Our service only works with organizations and individuals who wish to establish or confirm their domain ownership, including hosting and billing, through Comodo. Contact information is important for this to happen. We send email updates to your contact information, but we also need your e-mail address. Your e-mail address helps us get in touch with you to notify you when your certificate is ready.
Related Answers
Does Comodo still have a free firewall?
The Comodo Internet Security Premium program is an excellent valu...
Is Comodo Internet Security Premium any good?
We all know the importance of Comodo security software, so we can safely say it is...
Who owns Comodo security?
I'm an IT consultant and I've been using Comodo for years to secure my domain (comodo.c...