Advantages over Using Let's Encrypt

March 29, 2024 11:28

Many users often wonder about the differences between ZeroSSL and Let's Encrypt, and why they might choose one over the other. In this article, we aim to provide a thorough comparison of both platforms. By examining key aspects like usability, features, reliability, and support, we'll help you gain a clearer understanding of which certificate authority aligns best with your requirements.

Certificate Features

Below is a feature comparison table highlighting certificate issuance with a detailed look at ZeroSSL and Let's Encrypt offerings


Certificate Type	Domain Validation (DV)	Domain Validation (DV)
Certificate Lifespan	• 90 days	• 90 days • 1-year
Supported Domains	Single domain, Wildcard, SAN	Single domain, Wildcard, SAN
Wildcard Support	🟩 Yes	🟩 Yes
Multi-Domain Support	🟩 Yes	🟩 Yes
Organization Validation	🟥 No	🟥 No
Extended Validation	🟥 No	🟥 No
Validation	• Automated via ACME protocol	• Automated via ACME protocol • E-Mail • DNS • HTTP
Renewal Process	• Automated via ACME protocol	• Automated via ACME protocol • Automated via REST API • Manual via Web-App

Platform features

Next is the key differences between ZeroSSL and Let's Encrypt, helping you to easily evaluate which platform meets your specific requirements. Compare the features and usability of both platforms before making your choice.


Ease of Use	Tech skills required	Web-App guides you through the process
Certificate Creation	• Automated via ACME protocol	• Automated via ACME protocol • Web-App • REST API
Installation Checker	🟥 No	🟩 Yes
Certificate Management in Web-App	🟥 No	🟩 Yes
Auto CSR	🟥 No	🟩 Yes
Email Reminders	Opt-in	Automatically
Installation Guidance	Community Forum	Installation articles for all widely known Webservers & Cloud Hosters
Pricing	• Free of charge ACME	• Free of charge ACME • Freemium Web-App and paid Rest-API starting at $10
Customer Support	🟥 No	🟩 Yes

Limits

In this section, we outline the rate and usage limits imposed by both ZeroSSL and Let's Encrypt, providing clarity on usage restrictions to ensure seamless certificate issuance and management.


Certificates per Registered Domain Limit on the number of certificates that can be issued for a registered domain.	🚫 50 per week	✅ none
New Orders per account per 3 hours Limit on the number of new certificate orders that can be made per account within a 3-hour period.	🚫 300	✅ none
Names per Certificate Limit on the number of hostnames that can be included in a single certificate.	🚫 100	✅ none
Label Depth Limits the number of subdomains on the certificate e.g. sub1.sub2.sub3.sub4.sub5.sub6.com	🚫 10	🚫 6
Duplicate Certificates per week Limit on the number of duplicate certificates (renewals) that can be issued for the exact same set of domains within a week.	🚫 5	✅ none
Failed Validations per account per hostname per hour Limit on the number of failed validation attempts per account, per hostname, per hour.	🚫 5 failures	✅ none
Overall Requests per second Limit on the number of API requests per second for endpoints (e.g., new cert, revoke cert).	🚫 20	✅ REST API - none 🚫 ACME - 7
Accounts per IP Address per 3 hours Limit on the number of accounts that can be created from a single IP address within a 3-hour period.	🚫 10	✅ none
Accounts per IP Range within an IPv6 /48 per 3 hours Limit on the number of accounts that can be created from an IPv6 /48 range within a 3-hour period.	🚫 500	✅ none
Pending Authorizations Limit on the number of pending authorizations (authorization requests that have not been fulfilled) on an account.	🚫 300	✅ none

Conclusion

While the ultimate decision rests with the user, it's worth noting that for personal websites or blogs requiring 90-day certificates, Let's Encrypt remains a viable option.

However, for those seeking a more versatile solution, ZeroSSL presents compelling advantages:

less stringent rate limiting
user-friendly web application
option to easily upgrade to affordable 1-year certificates

ZeroSSL offers a convenient and adaptable choice for securing websites and applications. Additionally, our features enable small startups and SMBs to grow and fit their future needs, making it an ideal choice for businesses looking to scale their online presence securely.