European SSL Certificate Providers

SSL and TLS certificate providers issue the certificates that let browsers trust a website, and the certificate authority sits in the trust chain of every visitor connection. A European authority means the contracting party, the validation process and the dispute route all sit under EU law, and several of them also issue eIDAS qualified website certificates and PSD2 QWACs.

How we rank these tools — 4-step process
  1. 1
    European ownership, verified

    The company is headquartered and incorporated in the EU, EEA, the UK, Switzerland or Israel, and processes customer data in Europe or Israel. A US parent company disqualifies a tool from this page regardless of where its servers are.

  2. 2
    Category fit and hands-on review

    What the tool actually does, who it suits, and where it falls short — checked against the vendor’s own documentation, changelog and pricing page rather than its marketing copy.

  3. 3
    Compliance and pricing check

    GDPR posture, hosting location and the prices quoted on this page are verified against the vendor’s public pricing before publication, and re-checked when we revisit the category.

  4. 4
    Position on this page

    Placement on this page can be paid, and that can affect the order tools appear in. It never buys a listing: a tool that fails the checks above is not here at any price, and payment does not change the shortcomings we write about. A vendor can ask us to correct a factual error — not to remove a criticism.

Vendors can pay for visibility on this page. It never changes what an entry says about a product, including the criticism, and we earn nothing when you click through to a vendor. Paid placement can affect the order in which tools appear; it never affects whether a tool is listed. Editorial policy

10 European SSL Certificate Providers

Actalis

Italian CA with a free ACME plan and euro subscriptions

Italy
Free plan with ACME DV, OV, EV and QWAC Warranty up to EUR 2,000,000

HARICA

Greek academic CA with DV to QWAC from EUR 36 a year

Greece
DV, IV, OV, EV, QWAC Wildcard and onion DV Mozilla root since 2012

Certum

Polish CA selling DV, OV and EV certificates from EUR 25

Poland
Guarantee up to EUR 1,000,000 Wildcard and multi-domain EU infrastructure

Disig

Slovak CA with a public price list and private-PKI TLS

Slovakia
Public price list Wildcard TLS Free revocation

InfoCert

Tinexta InfoCert OV and EV TLS certificates with listed prices

Italy
OV and EV TLS Multi-domain and subdomain PSD2 certificates

D-Trust

Bundesdruckerei Group provider of qualified TLS and PSD2 certificates

Germany
DV, OV, EV, qualified EV PSD2 QWAC Certificate Service Manager

Namirial

Italian trust service provider with OV, EV, wildcard and multi-domain TLS

Italy
OV and EV certificates Wildcard and multi-domain Lifecycle management portal

Telia TLS Certificates

Telia TLS certificates with ACME automation for Finnish businesses

Finland
Single, multi and wildcard ACME automation Free management tool

ChamberSign

French CA selling Certiserv SSL certificates from EUR 142 excl. VAT

France
Standard, wildcard, multi-site OV and EV types RGS and eIDAS catalogue

Firmaprofesional

Barcelona provider of OV, EV and PSD2 server certificates

Spain
OV and OV wildcard EV and multi-domain EV PSD2 QWAC and QSealC

Key takeaways

  • Actalis in Bergamo, Italy, is the only provider on this list with a EUR 0 plan, which allows unlimited 90-day DV certificates once ACME automation is switched on.
  • Certum in Szczecin, Poland, publishes per-certificate euro prices of EUR 25 for DV, EUR 109 for OV and EUR 309 for EV, with a stated guarantee of EUR 200,000 to EUR 1,000,000.
  • D-Trust in Berlin and HARICA in Athens both list qualified website certificate types (EV Qualified and PSD2 TLS Qualified at D-Trust, OV QWAC, EV QWAC and PSD2 QWAC at HARICA), which matters for banks and payment institutions.
  • Disig in Bratislava prints a full price list dated 1 July 2026, in which EUR 39.17 excluding VAT buys two 200-day issues of a public TLS certificate.
  • Namirial in Senigallia, Italy, states that its TLS certificates are issued in partnership with Entrust, so the issuing chain should be read before ordering.

European SSL certificate providers are certificate authorities established in the EU, EEA, UK or Switzerland that issue the TLS certificates browsers use to trust a website, and a European contracting entity matters because the validation records, the contract and the dispute route then sit under EU law instead of a US parent company.

European SSL certificate providers compared

European SSL certificate providers compared on position, country, entry price and best use
PositionToolEstablishedEntry priceBest for
#1 Actalis Italy Free plan EUR 0; Bronze EUR 8.50 + VAT/month (EUR 7.00 billed yearly); Silver EUR 20 + VAT/month; Gold EUR 40 + VAT/month, billed yearly Small and mid-sized sites that want a euro-priced subscription instead of per-certificate pricing
#2 HARICA Greece Server certificates from EUR 36 per year Universities, research bodies and organisations that want a non-commercial-backed European root program member
#3 Certum Poland DV from EUR 25, OV from EUR 109, EV from EUR 309 (shop listing) Organisations that prefer a per-certificate price list in euro and a Polish contracting entity
#4 Disig Slovakia Public TLS EUR 39.17 excl. VAT (200 days, price covers two issues), wildcard EUR 156.67 excl. VAT Slovak and Central European organisations that want a printed price list and a local registration authority
#5 InfoCert Italy OV from EUR 150 + VAT, EV from EUR 250 + VAT, multi-domain EV EUR 435 + VAT (promotional, renewal at full price) Italian and southern European companies that already use InfoCert for signature, PEC or onboarding
#6 D-Trust Germany Pricing on request via sales Banks, fintechs, public bodies and German enterprises needing qualified website certificates
#7 Namirial Italy Enterprise pricing on request Organisations that already buy qualified trust services from Namirial and want website certificates under the same supplier
#8 Telia TLS Certificates Finland EUR 52.50 (single), EUR 140 (multi), EUR 207 (wildcard) per 6 months, excl. VAT Finnish companies already buying connectivity and security services from Telia
#9 ChamberSign France From EUR 142 excl. VAT (price grid updated 21 September 2026) French organisations that need certificates tied to the RGS and eIDAS frameworks
#10 Firmaprofesional Spain Online store or contact; no price on the product page Spanish companies and public bodies that need OV, EV or PSD2 certificates in Spanish

Every European SSL certificate provider reviewed

#1 Actalis

Bergamo, Italy Free plan EUR 0; Bronze EUR 8.50 + VAT/month (EUR 7.00 billed yearly); Silver EUR 20 + VAT/month; Gold EUR 40 + VAT/month, billed yearly Demo on request

Best for: Small and mid-sized sites that want a euro-priced subscription instead of per-certificate pricing

  • Operating company. ACTALIS S.p.A.
  • Jurisdiction. EU (Italy)
  • Where the data sits. Not stated on the pages reviewed
  • Source code. Closed source
  • Replaces. DigiCert Basic TLS, Sectigo, Let's Encrypt-style free DV

Actalis is the provider on this list that turns TLS into a subscription instead of a purchase. The free plan costs EUR 0 and allows four 90-day DV certificates on request, or unlimited 90-day single-domain DV certificates once ACME is activated.

Bronze costs EUR 8.50 plus VAT a month (EUR 7.00 if billed yearly), Silver EUR 20 and Gold EUR 40 billed yearly, and Gold adds one OV certificate and five DV wildcards. A site owner with a dozen hostnames gets one predictable number instead of a price list.

The legal entity is ACTALIS S.p.A., registered in Bergamo, so the contract and the invoice are Italian.

The shop writes down its warranty limits: EUR 50,000 for DV and EUR 500,000 for OV and EV as standard, rising with Warranty Plus to EUR 500,000, EUR 1,750,000 and EUR 2,000,000. Actalis also issues QWAC and QSealC certificates, S/MIME and code signing, and sells CertiManager for the management side. The pages reviewed do not state a founding year or where certificate data is stored.

What Actalis does well

  • Free plan with unlimited 90-day DV when ACME is activated
  • Euro prices published on the shop page
  • Warranty limits stated per validation level
  • Also issues QWAC, QSealC, S/MIME and code signing
  • Italian S.p.A. with a Bergamo company register entry

Where Actalis falls short

  • OV certificates only from the Gold plan or on request
  • Manual quarterly renewal on the Free plan without ACME
  • Data location not stated on the pages reviewed
  • Fewer enterprise management features than the US market leaders

Standout feature. Actalis is the only provider here with a published EUR 0 plan that runs unlimited 90-day DV certificates under ACME.

#2 HARICA

Athens, Greece Server certificates from EUR 36 per year Demo on request

Best for: Universities, research bodies and organisations that want a non-commercial-backed European root program member

  • Operating company. Greek Universities Network (GUnet), operator of HARICA
  • Jurisdiction. EU (Greece)
  • Where the data sits. Not stated on the pages reviewed
  • Source code. Closed source
  • Replaces. DigiCert, Sectigo, GlobalSign

HARICA is the Hellenic Academic and Research Institutions Certification Authority, and its footer names the Greek Universities Network (GUnet) at the University of Athens Network Operation Center as the body behind it. Its server certificate page lists DV, DV wildcard, DV onion, IV, IV wildcard, OV, OV wildcard, OV QWAC, EV, EV QWAC and a PSD2 QWAC, which is the widest validation menu among the ten providers. Server certificates start at EUR 36 a year.

According to the vendor, HARICA has been in the Mozilla root program since 2012 and the Microsoft program since June 2013, and its home page cites more than one million certificates and over 4,000 onboarded organisations. Greek-script domain names appear as examples, so internationalised domains are expected. No price is shown for OV, EV or QWAC types, and the pages reviewed do not state a data location. A university network also means less visible enterprise packaging than at commercial vendors.

What HARICA does well

  • Member of Mozilla and Microsoft root programs
  • DV, IV, OV, EV and QWAC all available
  • Starting price of EUR 36 per year
  • Wildcard and onion DV supported
  • Operated by a Greek academic network

Where HARICA falls short

  • No public price for OV, EV and QWAC types
  • No data location stated on the pages reviewed
  • Fewer commercial enterprise features visible

Standout feature. HARICA is the only provider on this list that lists individual-validated (IV) certificates and onion DV next to QWAC types.

#3 Certum

Szczecin, Poland DV from EUR 25, OV from EUR 109, EV from EUR 309 (shop listing) Demo on request

Best for: Organisations that prefer a per-certificate price list in euro and a Polish contracting entity

  • Operating company. Asseco Data Systems S.A. (Certum)
  • Jurisdiction. EU (Poland)
  • Where the data sits. Technical infrastructure located in the EU
  • Source code. Closed source
  • Replaces. DigiCert, Sectigo, GeoTrust

Certum sells TLS the way a web shop does: three products, each with a euro starting price and a stated financial guarantee.

DV Commercial starts at EUR 25 with a EUR 200,000 guarantee and issue within an hour, OV Trusted at EUR 109 with EUR 400,000, and EV Premium at EUR 309 with EUR 1,000,000. DV and OV come in 1, 4, 6 and 10-domain variants plus a wildcard, and EV in multi-domain variants. The shop can be switched to US dollars or Polish zloty.

Certum is the certification service of Asseco Data Systems S.A. in Szczecin, inside the Asseco Group, and describes itself as the largest certification centre in Poland. It says its infrastructure is in the EU, with an in-house data centre.

Each product page warns that the maximum validity period became shorter from 13 March 2026 and that at least one free reissue is needed, so the renewal burden is explained before checkout. There is no subscription or free tier, and decisions about the line sit with a large listed group.

What Certum does well

  • Starting prices published in euro per product
  • Financial guarantee stated for every certificate type
  • Infrastructure stated as located in the EU
  • Same vendor offers S/MIME, code signing and SimplySign
  • Reseller network and partner programme

Where Certum falls short

  • No subscription or free tier for TLS
  • Starting prices vary with the number of domains
  • Part of the Asseco Group rather than an independent specialist
  • No lifecycle management on the TLS pages reviewed

Standout feature. Certum is the one provider here that states infrastructure in the EU and a financial guarantee for every certificate type on the same product page.

#4 Disig

Bratislava, Slovakia Public TLS EUR 39.17 excl. VAT (200 days, price covers two issues), wildcard EUR 156.67 excl. VAT Demo on request

Best for: Slovak and Central European organisations that want a printed price list and a local registration authority

  • Operating company. Disig, a.s.
  • Jurisdiction. EU (Slovakia)
  • Where the data sits. Not stated on the pages reviewed
  • Source code. Closed source
  • Replaces. DigiCert Basic TLS, Sectigo

Disig, a.s. in Bratislava prints a price list that reads like a tariff. A publicly trusted single or multi-FQDN certificate is EUR 39.17 excluding VAT (EUR 48.18 with 23% VAT) and a wildcard EUR 156.67, each covering two issues of 200 days, according to the footnote. The list was updated on 1 July 2026, and revocation is free for every product. A multi-FQDN certificate can hold up to 15 FQDNs on the public product and 4 on the private one.

The TLS page separates two products: Web PKI certificates built to the CA/Browser Forum Baseline Requirements, and TLS certificates from an internal CA at EUR 39.17 for three years, where the partner imports Disig's own root.

Disig issues trust services under eIDAS and the Slovak Trusted Services Act and runs a registration authority at Galvaniho 17/C in Bratislava. The pages reviewed name neither OV, EV nor ACME, and the data location is not stated, so confirm those with the authority first.

What Disig does well

  • Full price list with and without VAT
  • Public Web PKI and private-PKI TLS both offered
  • Revocation free of charge
  • Price list updated 1 July 2026
  • Registration authorities in Slovakia

Where Disig falls short

  • OV, EV and ACME not named on the TLS pages reviewed
  • 200-day validity means two issues per listed price
  • Small national authority
  • Data location not stated on the pages reviewed

Standout feature. Disig is the only provider here that puts public Web PKI and private-PKI TLS in one printed price list with free revocation.

#5 InfoCert

Rome, Italy OV from EUR 150 + VAT, EV from EUR 250 + VAT, multi-domain EV EUR 435 + VAT (promotional, renewal at full price) Demo on request

Best for: Italian and southern European companies that already use InfoCert for signature, PEC or onboarding

  • Operating company. InfoCert S.p.A. (Tinexta Infocert)
  • Jurisdiction. EU (Italy)
  • Where the data sits. Not stated on the pages reviewed
  • Source code. Closed source
  • Replaces. DigiCert, Sectigo, GeoTrust OV and EV

InfoCert S.p.A., trading as Tinexta Infocert and directed by Tinexta S.p.A. from Piazzale Flaminio 1/B in Rome, lists five TLS-SSL products with euro prices. OV costs EUR 150 plus VAT, an OV for several websites EUR 150, an OV for several subdomains EUR 500, a standard EV EUR 250 and an EV SAN EUR 435. All five are marked promotional, and a footnote says renewal happens at the undiscounted price, which the page never states.

Ordering starts with a contact request, and the product page is in Italian. There is no DV or free tier, so a small site pays OV rates from the first certificate.

The attraction is the rest of the portfolio: digital signature, certified email (PEC), onboarding and PSD2 certificates sit with the same supplier, and the group site links sister companies in Spain (Camerfirma) and France (Certeurope). A company already buying signature or PEC from InfoCert can consolidate its TLS certificates with it.

What InfoCert does well

  • OV and EV prices published in euro
  • Multi-domain and subdomain options
  • Italian trust service provider under Tinexta
  • Same supplier for signature, PEC and onboarding
  • Sister companies in Spain and France

Where InfoCert falls short

  • Promotional prices, renewal at full price
  • No DV or free tier on the page
  • Contact request instead of online checkout
  • Italian-language product page

Standout feature. InfoCert is the only provider here that ties TLS to PEC certified email and an onboarding platform under one Italian group.

#6 D-Trust

Berlin, Germany Pricing on request via sales Demo on request

Best for: Banks, fintechs, public bodies and German enterprises needing qualified website certificates

  • Operating company. D-Trust GmbH
  • Jurisdiction. EU (Germany)
  • Where the data sits. Not stated on the pages reviewed
  • Source code. Closed source
  • Replaces. DigiCert, Entrust, GlobalSign for qualified and PSD2 certificates

D-Trust GmbH describes itself as a qualified trust service provider of the Bundesdruckerei Group, and its legal notice names Kommandantenstrasse 15 in Berlin and the Amtsgericht Berlin Charlottenburg, HRB 74346. The product comparison lists TLS DV ID, TLS OV ID, TLS EV ID, TLS EV Qualified ID and PSD2 TLS Qualified ID, with organisation checks on OV, EV and both qualified types. The two qualified certificates are marked eIDAS-compliant.

The Certificate Service Manager is a managed PKI where the customer requests and manages certificates itself, and the site cites an ISO 27001 accredited information security management system. There is no price list and no online checkout: ordering the qualified EV certificate starts with an email to the sales team. ACME is not mentioned on the pages reviewed. The offering fits banks, payment institutions, fintechs and public bodies, and it is more than an individual or a small blog needs.

What D-Trust does well

  • Qualified EV and PSD2 TLS certificates
  • Part of the Bundesdruckerei Group
  • Managed PKI via Certificate Service Manager
  • ISO 27001 accredited ISMS
  • German legal entity with Berlin commercial register entry

Where D-Trust falls short

  • No public price list
  • Sales-led ordering
  • No ACME automation mentioned on the pages reviewed
  • Aimed at organisations, not small sites

Standout feature. D-Trust is the only provider here from a state-owned printing and security group, selling PSD2 TLS Qualified ID next to ordinary DV.

#7 Namirial

Senigallia, Italy Enterprise pricing on request Demo on request

Best for: Organisations that already buy qualified trust services from Namirial and want website certificates under the same supplier

  • Operating company. Namirial S.p.A.
  • Jurisdiction. EU (Italy)
  • Where the data sits. EU
  • Source code. Closed source
  • Replaces. DocuSign, Adobe Sign, OneSpan

Namirial S.p.A. in Senigallia, Italy, is first a trust service provider and only then a certificate seller. The site's own review describes it as a Qualified Trust Service Provider under eIDAS in Italy, Spain and France, with identity verification, timestamping, archiving and signing alongside certificates. Its website-certificate page lists OV and EV, wildcard and multi-domain products and a lifecycle management portal, and states that issuance is done in partnership with Entrust.

That partnership is the sentence to read twice: the contract is Italian, but the trust chain behind the certificate is whatever Entrust provides, which the pages reviewed do not describe. No price is published, and pricing is enterprise and quoted, with sales-led engagement before evaluation. Namirial fits a company that already signs with Namirial and wants one accountable Italian supplier, and fits less well a buyer who wants a European root of trust.

What Namirial does well

  • Qualified Trust Service Provider in Italy, Spain and France
  • Qualified signatures with full legal equivalence across the EU
  • Identity verification, timestamping and archiving alongside signing
  • Multi-country certification for cross-border operations
  • Italian company, EU jurisdiction throughout

Where Namirial falls short

  • Enterprise pricing on request, no self-serve entry
  • More product than simple contract signing needs
  • Interface less modern than the newer platforms
  • Sales-led engagement before evaluation

Standout feature. Namirial is the only provider here that is a qualified trust service provider in three countries (Italy, Spain and France) and openly names a partner CA for its TLS issuance.

#8 Telia TLS Certificates

Finland EUR 52.50 (single), EUR 140 (multi), EUR 207 (wildcard) per 6 months, excl. VAT Demo on request

Best for: Finnish companies already buying connectivity and security services from Telia

  • Operating company. Telia (Telia Finland, part of Telia Company)
  • Jurisdiction. EU (Finland)
  • Where the data sits. Not stated on the pages reviewed
  • Source code. Closed source
  • Replaces. DigiCert, Sectigo OV certificates

Telia TLS Certificates is sold on the Finnish business site of Telia, the Nordic telecom operator, as a domestic certificate. Three products carry six-month prices excluding VAT: EUR 52.50 for one site (which also covers the www variant of the name), EUR 140 for several sites and EUR 207 for a wildcard. A year therefore costs about double, which matters when comparing against a per-year list.

The page promotes ACME for automatic renewal and a free tool for following the status of all certificates, renewing expiring ones and buying new ones in one place, and it explains the shortened validity that applies from March 2026.

Ordering takes place on a separate site, the page is in Finnish, and it does not name the issuing certificate authority or the contracting legal entity, which the company line (Telia Finland, part of Telia Company) only partly settles. Telia says it has worked with encryption and identification solutions for more than twenty years.

What Telia TLS Certificates does well

  • Prices published in euro for three product types
  • ACME automation advertised
  • Free certificate management tool
  • Wildcard and multi-domain options
  • Backed by a Nordic telecom operator

Where Telia TLS Certificates falls short

  • Finnish-language product page
  • Issuing CA and legal entity not named on the pages reviewed
  • Ordering on a separate site
  • Six-month pricing doubles for a full year

Standout feature. Telia is the only telecom operator on this list, so TLS renewals can sit on the same account as connectivity and security services.

#9 ChamberSign

Levallois-Perret, France From EUR 142 excl. VAT (price grid updated 21 September 2026) Demo on request

Best for: French organisations that need certificates tied to the RGS and eIDAS frameworks

  • Operating company. ChamberSign France SAS
  • Jurisdiction. EU (France)
  • Where the data sits. France (the site says identities are hosted in France)
  • Source code. Closed source
  • Replaces. DigiCert, Sectigo OV and EV

ChamberSign France SAS is registered in Nanterre with its registered office at CCI France in Levallois-Perret, and its site describes 25 years as a certification authority with identities developed, supplied and hosted in France. Certiserv SSL is the server range: standard, wildcard, multi-site, OV and EV types with SHA-256 hashing, starting at EUR 142 excluding VAT. The product page notes that validity is now limited to 200 days.

TLS is one line in a catalogue built around the French RGS and the European eIDAS regulation, with certificates for natural persons, companies and public portals.

A price grid dated 21 September 2026 is linked, and the footer carries general conditions, a privacy charter and the revocation list. Orders go through a sales expert, the pages reviewed show no free tier and no ACME, and the issuing chain for Certiserv SSL is not stated. The offer suits French companies, local authorities and associations more than international sites.

What ChamberSign does well

  • French SAS with Nanterre register entry
  • Standard, wildcard, multi-site, OV and EV types
  • Price from EUR 142 excl. VAT shown
  • Price grid dated 21 September 2026
  • RGS and eIDAS certificate catalogue

Where ChamberSign falls short

  • Sales-assisted ordering only
  • No ACME or free tier on the pages reviewed
  • French-language site
  • Oriented to French public platforms

Standout feature. ChamberSign is the one provider here whose TLS sits inside a catalogue shaped around the French RGS framework and CCI chambers of commerce.

#10 Firmaprofesional

Barcelona, Spain Online store or contact; no price on the product page Demo on request

Best for: Spanish companies and public bodies that need OV, EV or PSD2 certificates in Spanish

  • Operating company. Firmaprofesional, S.A.
  • Jurisdiction. EU (Spain)
  • Where the data sits. Not stated on the pages reviewed
  • Source code. Closed source
  • Replaces. DigiCert, Sectigo OV and EV

Firmaprofesional, S.A. is registered in the Barcelona Mercantile Register with its registered office at Paseo de Gracia 50, and a second site in Alcobendas near Madrid. Its logo and header present it as part of the Logalty group. The server certificate section lists SSL OV, OV wildcard, OV multi-domain, SSL Extended Validation and EV multi-domain, plus PSD2 QWAC and QSealC certificates, with an online store for purchases.

The OV page shows what validation involves: the applicant's ID or passport, the public deed and the tax card of the organisation, with the domain held by the organisation and the contact data matching the official domain registry. The application is a manual email process, no prices appear on the product pages, and neither DV nor ACME is mentioned. Beyond TLS the catalogue has electronic-office certificates for public administrations, qualified time stamps, VideoID, Firmacloud and Firmasign.

What Firmaprofesional does well

  • OV, OV wildcard and OV multi-domain
  • EV and EV multi-domain
  • PSD2 QWAC and QSealC
  • Spanish registered company in Barcelona
  • Part of a wider trust-services range

Where Firmaprofesional falls short

  • No prices on the product pages
  • Manual application by email
  • No DV or ACME on the pages reviewed
  • Spanish-language site

Standout feature. Firmaprofesional is the one provider here that spells out the exact company documents an OV application needs, in Spanish.

How do I choose between a subscription and a price per certificate?

The ten providers here sell in two ways. Actalis sells subscriptions, from the free plan through Bronze at EUR 8.50 plus VAT a month, Silver at EUR 20 and Gold at EUR 40 billed yearly, and Telia prices each certificate per six months (EUR 52.50 single, EUR 140 multi-domain, EUR 207 wildcard, excluding VAT). Certum, Disig, HARICA, InfoCert and ChamberSign quote per certificate instead.

A subscription fits an organisation with a dozen or more hostnames and an ACME client, because the invoice does not change when a certificate is reissued. A per-certificate list fits one shop or one company site. Read the unit carefully: Disig's EUR 39.17 covers two issues of 200 days, and Telia's prices have to be doubled for a full year.

Which providers can issue eIDAS qualified website certificates and PSD2 certificates?

Banks, payment institutions and fintechs that connect to bank interfaces need qualified certificates, and not every authority sells them. D-Trust lists TLS EV Qualified ID and PSD2 TLS Qualified ID, HARICA lists OV QWAC, EV QWAC and PSD2 QWAC, Actalis sells QWAC and QSealC, and Firmaprofesional sells PSD2 QWAC and QSealC. InfoCert lists PSD2 certificates among its products as well.

The qualified types add identity checks and paperwork, and for a blog or a small shop they add nothing. A DV certificate from Actalis or HARICA gives the same browser padlock. Pay for qualified status only when a regulation or a bank asks for it.

Does it matter who the contracting entity and the issuing CA are?

Yes, and the two are not always the same company. The contracting entity decides which law governs the invoice and the support relationship, and a register entry proves it exists: Actalis is registered in Bergamo, D-Trust at the Amtsgericht Berlin Charlottenburg under HRB 74346, and ChamberSign in Nanterre. The issuing CA decides whose root the browser trusts and who validates your organisation.

Namirial says its website certificates are issued in partnership with Entrust, and Telia's Finnish page does not name the issuer or the legal entity at all, so confirm both with those two before ordering. A European reseller of a non-European CA gives you a European invoice but not a European trust chain.

What breaks when I move away from DigiCert, Sectigo or another US authority?

The certificates themselves move without trouble, because browsers trust each authority on its own. What changes is everything around them: the account portal, the ACME endpoint and account credentials, the validation records for each domain, and any inventory or alerting you built on a vendor console. HARICA, Actalis and Certum each have their own portal, and Actalis sells CertiManager for the management side.

Plan the switch around renewal dates. Order the new certificate before the old one expires, install it, then let the old subscription lapse, rather than cancelling first. If you automate with ACME, check that the new provider documents an ACME endpoint: Actalis and Telia advertise it, while Disig, ChamberSign and Firmaprofesional do not mention it on the pages reviewed.

When should I not switch to a European certificate authority?

Stay where you are if your estate depends on a lifecycle platform your current vendor runs for you and none of the European tools replace it in scope. Actalis, Namirial and D-Trust sell management portals, but Certum, Disig, HARICA and Firmaprofesional show little on their TLS pages, and a company running thousands of certificates may value that tooling over the contracting jurisdiction.

Also think twice if you only need a free DV certificate. Let's Encrypt-style issuance is free everywhere, and the European case for DV rests on contract and support, not on cost. The case is stronger for OV, EV and qualified certificates, where you sign a contract and submit company documents.

Which provider suits a small company with a handful of domains?

Actalis is the closest match, since the free plan or Bronze at EUR 8.50 plus VAT a month covers DV for most small sites and the Gold plan adds an OV certificate. Certum is the alternative if you prefer a single DV purchase at EUR 25 or an OV at EUR 109 and no subscription. HARICA starts at EUR 36 a year and widens the validation menu.

Where the company is local, the national authority is often easier: ChamberSign for French organisations, Firmaprofesional for Spanish ones, InfoCert for Italian companies that already use its signature products. Their pages are in the local language and ordering goes through sales, so expect a slower start than the web shops.

How we selected and ranked these 10 tools

Every tool on this page is in the European Purpose directory, which means the operating company is established in Europe and we have verified that from the company register or the vendor's own legal notice rather than from a marketing page. Tools headquartered outside Europe are not eligible, however good they are.

  1. Feature verification (weight: 40%). We check each capability against the vendor's own documentation and product pages, and record what the tool does rather than what the category is assumed to include.
  2. Ease of adoption (weight: 30%). Integrations, published API access, trial availability and how much configuration stands between signing and a usable result.
  3. Value and transparency (weight: 30%). Published pricing counts in a vendor's favour; quote-only pricing is recorded as quote-only rather than estimated. We weigh what a buyer gets for the entry price, not the headline feature count.
  4. Editorial review. Every page is researched and drafted with AI assistance, and the compliance and pricing claims are checked against the vendor's documentation before it is published under the founder's editorial responsibility. The three weights above decide the order; a position is a ranking against the other European tools in this category, not an absolute score.

Vendor-reported outcomes — ROI figures, margin uplift, time saved — are labelled as vendor claims wherever they appear on this page. We have not audited them, and neither has anyone else who quotes them. Read our full editorial process for how pages are re-verified.

Frequently asked questions

It depends on the certificate type. Actalis in Italy suits small sites with its free ACME plan, Certum in Poland and HARICA in Greece publish starting prices for DV, OV and EV, and D-Trust in Germany, InfoCert in Italy and Firmaprofesional in Spain cover OV, EV and PSD2 certificates for regulated buyers.

Actalis offers a free plan at EUR 0, with four 90-day DV certificates on request or unlimited 90-day single-domain DV certificates once ACME automation is activated. No other provider on this list publishes a free tier on the pages reviewed.

Actalis, Certum, Disig, HARICA (from EUR 36 a year), InfoCert, Telia and ChamberSign (from EUR 142 excluding VAT) show euro prices. D-Trust works through sales, and Namirial and Firmaprofesional show no price on their product pages.

HARICA states that it has been in the Mozilla root program since 2012 and the Microsoft program since June 2013, and Disig issues publicly trusted certificates under the CA/Browser Forum Baseline Requirements. For other providers, check the issuing chain before buying.

D-Trust lists PSD2 TLS Qualified ID, HARICA lists PSD2 QWAC, Firmaprofesional sells PSD2 QWAC and QSealC, Actalis issues QWAC and QSealC, and InfoCert lists PSD2 certificates among its products.

Validity has been shortened. Certum notes a shorter maximum from 13 March 2026, Disig lists 200-day certificates, and ChamberSign says validity is limited to 200 days, so plan on at least two renewals a year and look for ACME.