Casper College DoIT

Certificate of Authority Review

Other CA's .vs. Verisign

• Bottom Line: The other CA's all seem to offer substantial cost savings over Verisign. Verisign probably commands a higher price because of brand name recognition. Online retailers will pay more because they feel buyers may “trust” Verisign over others.

• ACEDICOM, AffirmTrust, Buypass, Camerfirma, Certicamara S.A., Certigna of Dhimyotis, certSIGN, Certum, Chunghwa Telecom, CNNIC, Comodo, ComSign, DCSSI/ANSSI, DigiCert, DigiNotar (Removed), Disig, E-Guven, Entrust, E-TUGRA, Firmaprofesional, GeoTrust, GlobalSign, Go Daddy, Hongkong Post, IdenTrust, Izenpe, Japanese GPKI, JCSI, Kamu SM, Keynectis/Certplus, Microsec, NetLock, Network Solutions, QuoVadis, SECOM Trust, Sertifitseerimiskeskus AS, Staat der Nederlanden, StartCom, S-TRUST, SwissSign, TC TrustCenter, thawte, Trustwave, T-Systems, TURKTRUST, VeriSign, Verizon / Cybertrust, Wells Fargo, WISeKey

Digicert .vs. Verisign

• Why Digicert was selected for comparison with Verisign

• The college already has 2 certificates with them• Our past experience has been positive• Very good Utah based support• Certificate issuance is much faster• Competitive pricing when compared to other CA's

Apples to Apples...

• Verisign SSL Certificates vs. DigiCert & Thawte Compare Table

• http://factoidz.com/verisignssl-review-and-promo-coupon-code/

• SSL Certificate Comparison (from digicert)• http://www.digicert.com/welcome/ssl-plus-compared.htm

• SSL Reviews• http://www.sslshopper.com/certificate-authority-reviews.html

• SSL Certificate List• http://www.sslshopper.com/ssl-certificate-list.html

Casper College CA's

• Verisign - 12 certs $14,652 /year• Digicert - 12 equivalent certs would be

$4,824 /year at retail pricing• Details...

Digicert Options• Purchase certs one at a time• Contract with Digicert for a package of certs

which includes their “Managed PKI - Enterprise SSL Certificate Management” web service.

• Managed PKI is designed to help organizations take control of certificate management. Account administrators can immediately issue new certificates and reissue, replace, and revoke existing certificates on demand.

The Digicert Deal

• Digicert's ManagedPKI package deal• Contract quote...

• 71%, $9,828.00 / year at retail pricing• 81%, $11,802.00 / year with contract pricing

Examples...

• WebAccess (Verisign EV)• https://gw.caspercollege.edu/gw/webacc• Data Synchronizer (digicert Standard)• https://nds.caspercollege.edu:8120/login• Library Remote Database Login• https://login.jaws.caspercollege.edu/login• What does digicert EV Look Like?• http://www.digicert.com/ev-ssl-certification.htm

Questions...

• Is leaving Verisign where we want to cut corners?

• Does CC need the brand name recognition that Verisign has?

Next Step

• Continue with Verisign if their brand name recognition is valuable for the college

• See if stakeholders are willing to change to Digicert

• Switch to Digicert at retail pricing• Switch to Digicert inking a one to three year

deal with them• or• Investigate additional CA issuers