Troy Starr

Certificate authorities that issue ECC certificates

Discussion created by Troy Starr on Jun 12, 2015
Latest reply on Mar 23, 2016 by Troy Starr

I was recently searching for certificate authorities that issue Elliptic Curve Cryptography (ECC) certificates and found this information hard to find.  So I ended up making a list and thought I'd share it in case others might find it helpful.

 

As a brief reminder, ECC certificates are based on elliptic curve algorithms such as ECDSA instead of the more traditional RSA algorithm.  ECC certificates are smaller and faster at a given security level than RSA certificates, but they're not as widely supported in older software and devices.

 

This probably isn't a complete list since there are many certificate authorities operating today.  If you're aware of certificate authorities that issues ECC certificates and aren't in this list, feel free to add that information to this thread.

 

- Troy Starr

 

Certificate Authorities

 

DigiCert

 

ECC Certificate Information

Elliptic Curve Cryptography (ECC Certificates)

Microsoft Servers: Create ECC CSR and Install ECC SSL Certificate

Apache: Create ECC CSR and Install ECC SSL Certificate

 

Root Certificates

DigiCert Root Certificates

 

Notes

  1. DigiCert doesn't issue domain validation (DV) certificates.  DigiCert does issue high assurance (organization validation/OV and individual validation/IV) and extended validation (EV) certificates.
  2. By default, DigiCert ECC certificates will chain to an ECC intermediate certificate, and then to an RSA root certificate.  Contact DigiCert support if you would like your ECC certificate to ultimately chain to their ECC root certificate instead.

 

 

Entrust

 

ECC Certificate Information

Elliptic Curve Cryptography (ECC) Certificates

Elliptic Curve Cryptography (ECC) Hybrid Certificates

 

Root Certificates

Entrust Root Certificates

 

Notes

 

 

GlobalSign

 

ECC Certificate Information

ECC Resource Center

ECC

ECC Compatibility

Generate ECC CSR Windows Server 2008+

ECC 101: What is ECC and why would I want to use it?

 

Root Certificates

GlobalSign Root Certificates

 

Notes

  1. GlobalSign started issuing ECC certificates on May 27, 2015.

 

 

Symantec

 

ECC Certificate Information

SSL Algorithms

Data Sheet: Symantec SSL Certification with ECC Algorithm

FAQ: ECC and DSA Certificates Website Security Solutions

Introducing Algorithm Agility: ECC and DSA

 

Root Certificates

Symantec Root Certificates

 

Notes

Outcomes