DigiCert CertCentral

Ease of purchase - While this is usually pretty easy since vendors want money, I am glad to say it is seamless and easy here as well. Certificate creation - It is an easy workflow with various options and ease of recoding, reissuing, and revoking certificates quickly and easily. Deployment - My favorite part is the download options once the cert is created. All the formats you could want, and the intermediary and CA right there each time. No hunting for it or exporting it yourself.

UI is kind of intuitive except for the notifications (that works 50/50 on the visual part) and the lack of possibilities to apply the same configuration in multiple roles.

DigiCert feels like a premium company. Like the Apple of code signing, if that makes sense. I feel like people see the signature on our application and know we went through the work to be legitimate. The online portal has always been straightforward to use and I've never had any issues with it. Additionally, the support has always been able to answer any questions I've had along the way.

I wish adding additional SANs to a certificate mid-life was easier, even though that is rarely needed. Domain validation on domains is separate from domain validation on an order, creating multiple TXT records. When making copies of a wildcard cert, I wish it could be extended past initial creation date without messing up all of the other copies. I supposed that is not as much a problem with the platform as much as certs in general.

Difficulty in applying the same configuration across multiple roles. This then increases the human error-prone factor of applying the same config across multiple roles/profiles.

The biggest thing for me would have to be the renewal and installation process. Once you know the process, it's not too bad, but it's something we only do once or twice a year, and with that much time between, it's so hard to remember. Additionally, I wish they wouldn't create the initialization code to install to a physical token until I'm ready to do it. Pretty much every time we've had to install a new certificate, the initialization code has expired and I have to request a reissue. This reissue process just complicates the renewal, which I already struggle to remember each time.