Actalis Extended Validation SAN, € 900.00/yr. on SSL Certificates

Extended Validation SAN has been added on Oct 22, 2025

🔐 Domains protected :	5
💳 Payment Methods :	Credit / Debit / Prepaid CardsWire Transfer
✍️ Support Options :	Help Desk
⚑ Targeting :	IT

See also initial Extended Validation SAN plan location on their website!

*📜 Plan description

📄 Editorial Review

Actalis is an eIDAS-qualified Certification Authority under the Aruba Group, positioned as a European trust-services provider rather than a traditional web host. Their strength is compliance-grade digital identity and certificate issuance (SSL/TLS, S/MIME, Code Signing, QWAC) backed by rigorous security management and enterprise tooling. The pitch is clear: globally recognized trust services delivered from Tier IV-class facilities with strong process certifications.

Company & Compliance

Since 2009 they have operated within the Aruba ecosystem (Aruba S.p.A.), a major Italian player in data centers, cloud, hosting, email, and domains. Actalis is active across public administration and private sectors, at home and abroad. Compliance is a centerpiece: eIDAS CA accreditation, CAB Forum membership for baseline/EV rules, and a broad certification stack (ISO 9001, ISO 27001, ISO 37001, ISO 45001, ISO 20000-1, ISO 22301). For buyers who equate trust with verifiable governance, this is a strong signal.

Infrastructure & Availability

Trust services run from Aruba data centers meeting ANSI/TIA-942 Rating 4 (Tier IV-class) requirements, with a European hosting footprint. They do not claim to own the facilities directly; instead, they operate on Aruba’s Tier IV infrastructure. Specific city lists are not highlighted, but the stance is resilience and compliance over geography marketing.

Product Portfolio

SSL/TLS Certificates (DV, OV, EV)

A full spread from Domain Validation up through Organization and Extended Validation, with warranties and enterprise issuance options. The emphasis is TLS done by the book—server authentication plus encrypted channels for ecommerce and high-trust sites.

S/MIME

End-to-end email protection with identity assurance for users and organizations, aligned to regulated workflows and anti-phishing posture.

Code Signing

Publisher identity and integrity assurance for software distribution pipelines.

QWAC (Qualified Website Authentication Certificates)

EU eIDAS-qualified certificates for regulated use cases requiring qualified assurance.

PKI & Enterprise Trust

Managed PKI options and Actalis CertiManager, which centralizes certificate lifecycle tasks (CSR-based self-issuance, notifications, downloads, and inventory). This helps larger teams standardize issuance and renewals, cut outages from expirations, and enforce policy.

Digital Identity, Trusted IoT, DORA & NIS2

Solutions aimed at identity proofing, device trust, and regulatory alignment for EU frameworks, reflecting a focus on security governance rather than commodity certificates.

Management & Control

• Customer Area for ordering and account tasks.
• Actilis CertiManager (MPKI) for centralized discovery, issuance, renewals, and alerts at scale—crucial for enterprises juggling many SANs and endpoints.

Support & Operations

Specialist operators are reachable via phone and tickets, complemented by a knowledge base. This is a practitioner-grade support model—less "consumer chat," more structured assistance aligned to PKI workflows.

Pricing & Payments

Public pricing starts from €30.00 + VAT in some contexts, with DV entry points also shown at €50.00 + VAT / first year depending on the path and bundle. Payments are available via credit card (Banca Sella circuit) and PayPal, with specific guidance for public administration. Pricing is presented in EUR, with selectors that may display USD, GBP, PLN for reference.

Money-Back & Uptime

• Refunds: no standing "money-back guarantee." They allow 14-day refunds for certain products (e.g., SSL/Code Signing) when revoked/canceled within that window; after 14 days, standard withdrawal generally does not apply unless explicitly provided.
• Uptime/SLA: no formal uptime guarantee is published for trust services. Transparency leans on compliance and facility standards rather than SLAs with credits.

Languages & Localization

The website is available in English and Italian. Documentation and controls prioritize a European audience, with terminology aligned to EU regulations and procurement norms.

Strengths

• eIDAS-qualified CA with CAB Forum membership and a deep ISO certification portfolio.
• Tier IV-class data-center backbone via Aruba, emphasizing resilience and continuity.
• Enterprise-grade lifecycle tooling (CertiManager) that reduces operational risk from expirations and inconsistent issuance.
• Coverage beyond SSL—S/MIME, Code Signing, QWAC, PKI, Trusted IoT, and regulatory solutions (DORA/NIS2).

Caveats

• No broad money-back window; refunds are typically limited to 14 days for eligible products.
• No published uptime/SLA with service-credit mechanics.
• Infrastructure cities are not enumerated, which may matter to teams requiring granular data-residency disclosures beyond "EU / Tier IV-class."