GlobalSign review

GlobalSign is a certificate authority and digital identity provider for organizations securing websites, email, software, documents and IoT devices. Its offering goes beyond buying an SSL/TLS certificate: the company also lists certificate automation, managed PKI and identity products for enterprise workflows.

The product set covers several distinct jobs. SSL/TLS certificates secure websites; code signing is intended to help prevent software and application tampering; S/MIME helps employees identify legitimate email; and document signing supports electronic, digital, AATL, eIDAS and PSD2 signing. Managed PKI provides centralized control over certificates and user activity, while certificate automation provisions certificates using customizable solutions and preset policies.

That breadth may suit teams trying to handle multiple certificate and identity needs with one provider. It also means GlobalSign is not a like-for-like choice for a buyer who only needs the cheapest domain certificate. The right comparison depends on which certificate types and workflows you need.

GlobalSign’s main strength is coverage across certificate types and identity workflows. Instead of stopping at website encryption, its listed products address software signing, employee email, document signing and IoT devices. Managed PKI adds centralized control over certificate and user activity; certificate automation offers customizable solutions and preset policies for provisioning.

The SSL range has distinct options for different validation and domain needs, according to the published pricing information:

• Domain Validated (DomainSSL): one domain, listed at $20.75 per month when billed annually.
• Organization Validated (OrganizationSSL): one domain, with optional SAN support, listed at $29.08 per month when billed annually.
• Extended Validated (ExtendedSSL): one domain and up to 100 SANs, listed at $49.92 per month when billed annually.
• Wildcard SSL: one primary domain and unlimited subdomains, listed at $70.75 per month when billed annually.

Those explicit distinctions make it easier to match a certificate to a basic single-domain site, an organization-validation requirement, or a subdomain-heavy setup. GlobalSign also lists document-signing support for several named standards and frameworks, which may matter to organizations with specific signing requirements.

The pricing is not especially transparent for buyers who need monthly billing: monthly prices are not published on the vendor's site. The listed figures are per-month equivalents when billed annually. There is no free plan, and trial availability is not published. The starting listed price is $20.75 per month for a one-domain DV certificate; OrganizationSSL is $29.08, ExtendedSSL is $49.92, and Wildcard SSL is $70.75 per month on the same annual-billing basis. Wildcard covers unlimited subdomains, but the other listed plans have specific limits, including one domain and, for EV, up to 100 SANs.

User feedback also raises a reason to check the workflow before committing. A commenter on r/StructuralEngineering called GlobalSign a little painful to use for digital signatures, while a thread on r/programming alleges a code-signing certificate was revoked after a malware false positive. Those are individual reports, not proof of a general service problem, but they flag friction in document-signing and code-signing scenarios. Buyers relying on either workflow should clarify validation, revocation and support procedures before switching.

The listed starting price is $20.75 per month for DomainSSL, but that is an annual-billing equivalent; GlobalSign does not publish monthly prices in the published pricing information. DomainSSL covers one domain. OrganizationSSL is $29.08 per month on the same basis, an $8.33 step up, for one domain with optional SAN support. ExtendedSSL costs $49.92 per month, $20.84 above OrganizationSSL, and includes one domain with up to 100 SANs. The DV or OV Wildcard option is $70.75 per month, another $20.83 above EV, for one primary domain and unlimited subdomains.

These are not directly comparable tiers: validation type, SAN allowance and subdomain coverage differ. The published pricing lists no add-ons, so it does not establish whether extra services cost more. There is no free plan, and a free trial is not specified. Confirm the contract term, renewal price and any charges for options before budgeting; monthly billing rates are not published.

Migration effort depends on which certificates and identity products you use. The published product information lists SSL/TLS, code signing, S/MIME, document signing, certificate automation and managed PKI, but it does not describe migration tooling, data export, integrations or a transition service. Ask GlobalSign what can be imported, what must be reissued, and how it handles certificates already deployed across sites, users and devices. Get the answers in writing before setting a cutover date.

Lock-in and exit costs are not specified in the available material. The review notes user-reported revocation friction, but gives no details about the cases or how often they occur, so treat that as a question to investigate rather than a settled pattern. Ask how revocation requests are handled and what records you can export if you leave. Teams switching away should also confirm how they will replace managed PKI and certificate automation; the sources do not identify a standard offboarding process.