SSLGuides.com
Home / Useful Links
Off-site resources

Useful Links

Where we send people when the answer isn't (or shouldn't be) on this site — the certificate authorities themselves, the tools we didn't build, the standards bodies that actually decide how this all works, and a few places to ask a real person.

Certificate authorities

The organizations that actually issue certificates. Pricing, validation requirements, and support quality vary — see our CA comparison for how we weigh them against each other.

Let's Encrypt Free, automated, open — the certificate authority behind most of the web's HTTPS growth since 2016. DigiCert Enterprise-grade OV/EV certificates, also operates the CT log infrastructure much of the industry relies on. Sectigo One of the highest-volume commercial CAs, formerly Comodo CA. GlobalSign Long-established CA with a particular focus on IoT and enterprise PKI. SSL.com Commercial CA covering DV through EV, including document and code signing. ZeroSSL Free ACME-based certificates with a browser-based issuance flow as an alternative to Let's Encrypt's tooling.

Free tools worth bookmarking

A few tools we didn't build ourselves but reach for constantly — alongside our own 17 free SSL tools.

Qualys SSL Labs — SSL Server Test The industry-standard deep scan of a server's TLS configuration, with a letter grade and a full breakdown of every finding. crt.sh Search Certificate Transparency logs directly — every publicly-logged certificate ever issued for a domain, indexed and searchable. Mozilla SSL Configuration Generator Generates a current, tested TLS configuration block for Apache, Nginx, and others — referenced throughout our own how-to guides. ITcard.org — SSL & certificate tools A companion toolbox site with its own set of certificate decoders, converters, and calculators.

Standards bodies & governance

Where the actual rules get written — worth reading directly when a guide (ours or anyone else's) leaves you wanting the primary source.

CA/Browser Forum The voluntary consortium of CAs and browser vendors that sets the Baseline Requirements every publicly-trusted certificate must meet. IETF TLS Working Group The working group that actually specifies TLS itself — where TLS 1.3 and its successors are drafted and standardized. Mozilla CA Certificate Program The policy and included-CA list behind Firefox's (and much of the open-source world's) trust store. Chrome Root Program Chrome's own root-CA inclusion policy — increasingly its own thing rather than simply mirroring Mozilla's.

Community & discussion

For the specific, gnarly question that a guide — including ours — won't quite answer.

Let's Encrypt Community Forum Active, well-moderated, and often the fastest way to debug an ACME/Certbot issue that's specific to your setup. Server Fault — "ssl" tag Sysadmin-focused Q&A, strong on server- and infrastructure-side certificate problems. Information Security Stack Exchange — "tls" tag Deeper protocol- and cryptography-level discussion, useful once a question goes past "how do I configure this."

Background reading

For the history and technical detail a practical guide has to leave out.

Wikipedia — Transport Layer Security A thorough protocol-history overview, including every version from SSL 2.0 through TLS 1.3. Wikipedia — Public key certificate The certificate format itself: fields, extensions, and how X.509 actually structures the data. Wikipedia — Certificate authority How the CA trust model works, and the incidents that have periodically tested it. Wikipedia — HTTPS HTTPS specifically, as distinct from the underlying TLS protocol it runs on. Wikipedia — X.509 The ITU-T standard that defines the certificate format almost everything on this site is ultimately talking about.

These are external sites we don't control — we link to them because we find them genuinely useful, not because of any partnership. See our disclaimer for how that's separate from the affiliate links elsewhere on this site.