GlobalSign

What GlobalSign actually is

GlobalSign is one of the internet's original certificate authorities. It started life as BelSign in Leuven, Belgium, in October 1996 — its first root was a 512-bit RSA certificate signed with the CryptWare Server — rebranded to GlobalSign in 1998, embedded its root in Netscape and Windows 2000, and began selling SSL certificates shortly after. Japanese internet conglomerate GMO Internet Group acquired the company in 2007; today it operates as GMO GlobalSign with headquarters in Portsmouth, New Hampshire, offices in more than 13 locations across the Americas, Europe, and Asia-Pacific, and roughly 500–1,000 staff. It has been WebTrust-accredited since 2001 and reports more than 267 million certificates issued.

The product line starts with the three familiar TLS validation tiers. DomainSSL (DV) validates domain control only and issues in about five minutes. OrganizationSSL (OV) includes vetted company identity in the certificate and takes one to two business days. ExtendedSSL (EV) adds full legal-entity and address vetting over three to four business days. List prices run $249 per year for DomainSSL, $349 for OrganizationSSL, and $599 for ExtendedSSL, with Wildcard at $849 and multi-domain SAN certificates starting at $249. Underwritten warranties scale with validation: $10,000 on DV, $1.25 million on OV, $1.5 million on EV. All tiers include unlimited server licensing and unlimited reissues, and SAN support covers up to 100 domains, subdomains (on OV), or public IP addresses.

Where GlobalSign differs from the commodity end of the CA market is everything around the certificate. Its Atlas platform handles high-scale issuance; Managed PKI (the GlobalSign Certificate Center) gives enterprises centralized inventory, delegated ordering, and Active Directory integration; Certificate Automation Manager, LifeCycleX, TLS Connect, and ACME support cover lifecycle automation; and there are adjacent products for code signing, document signing (under Adobe's trust program), S/MIME email certificates with BIMI/VMC support, eIDAS qualified certificates and seals, PSD2 QWACs, and an IoT identity platform with zero-touch device enrollment. If your problem is "we have 40,000 certificates across three business units and nobody knows when they expire," this is the product family you're buying — not the $249 DV certificate.

Pricing: what you really pay

The retail TLS prices above are list prices for a single year, and they are expensive for what is, at the DV level, an automated domain-control check. The current validity rules cap certificates at 200 days, so GlobalSign sells a "1-year" DV as two 199-day certificates and a half-year option as one; multi-year purchases are structured the same way and carry discounts per additional year (the company's published tables have historically quoted around 20% per additional year, plus volume discounts through the account portal).

Real transactions rarely pay full list. Authorized resellers discount meaningfully — one UK reseller lists DomainSSL from £103 per year and OrganizationSSL from £180 — and enterprise Managed PKI contracts are negotiated. Regional ordering is enforced: you must buy from the region where the certificate's legal entity is based, in that region's currency, which is a compliance feature that also removes price arbitrage between storefronts.

One transparency complaint: GlobalSign's own storefront renders prices client-side, so automated readers and some scrapers see bullets instead of numbers. We had to price this review through third-party listings and GlobalSign's own published comparison tables. That's an unnecessary friction for a company selling trust.

Against the market, the honest comparison is Let's Encrypt: free, automated DV certificates with the same browser trust, which has absorbed most of the personal-site and hobby use case. GlobalSign's DV at $249 list only makes sense when you want the warranty, the site seal, the phone support, wildcards and SANs under one contract, or a CA you can hold accountable. OV and EV are where the company's value is real — vetting, identity, and support that free CAs don't perform.

Performance & infrastructure

For a CA, "infrastructure" means roots, revocation, and issuance operations rather than data centers and cores — hence the empty infrastructure columns in our database. On those terms GlobalSign is strong. Its roots are ubiquitous across browsers, mobile platforms, and operating systems (the trust store story is genuinely decades deep), its revocation network (CRL plus OCSP) is globally distributed and marketed as DDoS-resistant with high availability, and issuance is fast at the DV level — minutes — with OV and EV vetting times that match or beat the industry.

Certificate cryptography is current: SHA-256 signatures, RSA 2048-bit and above, ECC P-256/P-384, and post-quantum readiness work is on the roadmap alongside the rest of the industry. Free unlimited reissues and unlimited server licenses remain standard, which still separates GlobalSign from CAs that meter seats and installs.

Reliability track record: 25+ years as a public CA with no root-caused mass-distrust event of the kind that has ended other CAs. That continuity is the core asset being sold. Support is 24/7 by phone, email, and live chat with a seven-day refund window — modest, but real humans on a phone line is exactly what enterprise buyers are paying for.

Where it falls short

Price, plainly. $249 list for a DV certificate is a decade-old price point in a market where the default is free automation. Budget CAs and resellers undercut GlobalSign on every commodity tier; if all you need is HTTPS on a blog, this is the wrong product and we'd say so to anyone's face.

Second: the buying experience. JavaScript-rendered prices, region-locked storefronts, and a product taxonomy that spans DomainSSL/OrganizationSSL/ExtendedSSL plus a separate enterprise platform means a simple purchase can take longer than the issuance itself. The web account (GCC) works, but it is an enterprise portal first.

Third: the validation tiers' value is eroding at the edges. Browsers have stripped most EV visual indicators over the years, so the $599 EV certificate buys vetting and warranty rather than a green bar. For many business sites, OV at $349 captures most of the benefit.

Finally, GlobalSign is a GMO Internet Group subsidiary, which matters to a small set of buyers with supply-chain or jurisdiction requirements — Japanese ownership, US headquarters, Belgian origins, EU operations. Most buyers won't care; those who do should map it explicitly.

A word on the automation story, since certificate lifecycle is where outages actually come from: an expired certificate takes down production more often than any attacker does. GlobalSign's answer is ACME support for automated issuance and renewal, the Certificate Automation Manager and LifeCycleX tooling for discovery and renewal across inventories, and Atlas Discovery for finding certificates you forgot about — including those issued by other CAs. For an organization with a mix of load balancers, appliances, and internal services, that discovery-and-renewal layer is the part that prevents the 3 a.m. page. In our view it's the strongest argument for paying GlobalSign instead of running free certificates by hand, and it's the piece that outlasts any debate about validation tiers or browser indicators.

Who should pick this

Our pick for enterprises and mid-market companies with certificate estates to manage rather than single certificates to buy. The Managed PKI platform, automation tooling (ACME, Certificate Automation Manager, LifeCycleX), Active Directory integration, and human support are the purchase; the TLS certificate is the entry ticket. Regulated industries get real value from eIDAS qualified certificates, PSD2 QWACs, and the document-signing and S/MIME lines under one CA relationship.

Organizations that need OV or EV vetting — financial services, marketplaces, anyone whose counterparties verify company identity in certificates — are the sweet spot for the retail tiers, ideally bought through a reseller or a volume agreement.

Skip it for hobby sites, personal blogs, and simple HTTPS: Let's Encrypt does that job at zero cost. Skip it too if you want consumer-style self-serve pricing; the structure here assumes a business account. For the broader certificate market, see /category/ssl-certificates.

Key takeaways

• One of the internet's original CAs: founded 1996 in Leuven, Belgium, GMO Internet Group subsidiary since 2007, HQ in Portsmouth, New Hampshire
• TLS list pricing: DomainSSL $249/yr, OrganizationSSL $349/yr, ExtendedSSL $599/yr, Wildcard $849/yr; resellers discount materially
• Warranties scale with validation ($10k DV, $1.25M OV, $1.5M EV); unlimited server licensing and reissues included
• The real product is Managed PKI and lifecycle automation (Atlas, GCC, ACME, Certificate Automation Manager) for large certificate estates
• WebTrust-accredited since 2001, 267M+ certificates issued, 24/7 phone support — continuity is the asset
• Overkill for simple HTTPS (use Let's Encrypt); right for enterprises needing vetting, compliance certificates (eIDAS, PSD2), and one accountable CA

Sources

• https://shop.globalsign.com/en/ssl/domain-ssl
• https://shop.globalsign.com/en/ssl/wildcard-ssl
• https://globalsign.com/en/ssl/ev-ssl
• https://tr-web.stage.trustradius.com/products/globalsign-ssl-digital-certificates/pricing
• https://www.whtop.com/plans/globalsign.com/89044
• https://globalsign.tbs-certificates.co.uk/certificats_globalsign.html.en
• https://globalsign.com/en/company/news-events/news/archive/globalsign-25-year-anniversary
• https://probsee.com/p/GlobalSign
• https://grokipedia.com/page/GlobalSign
• https://akta.pro/company-profiles/003w8aj/globalsign
• https://mandos.io/data/companies/globalsign
• https://globalsign.com.tr/kaynaklar/indir/datasheet-globalsign-ssl-certificates/