Actalis Review 2025. Is actalis.com good or bad on providing SSL Certificates services?

📄 Editorial Review

🔃 Actalis is part of Aruba
(3*) 🔧 Services: SSL Certificates
⇔ Redirected from actalis.it
Actalis is an eIDAS-qualified Certification Authority under the Aruba Group, positioned as a European trust-services provider rather than a traditional web host. Their strength is compliance-grade digital identity and certificate issuance (SSL/TLS, S/MIME, Code Signing, QWAC) backed by rigorous security management and enterprise tooling. The pitch is clear: globally recognized trust services delivered from Tier IV-class facilities with strong process certifications.

Company & Compliance

Since 2009 they have operated within the Aruba ecosystem (Aruba S.p.A.), a major Italian player in data centers, cloud, hosting, email, and domains. Actalis is active across public administration and private sectors, at home and abroad. Compliance is a centerpiece: eIDAS CA accreditation, CAB Forum membership for baseline/EV rules, and a broad certification stack (ISO 9001, ISO 27001, ISO 37001, ISO 45001, ISO 20000-1, ISO 22301). For buyers who equate trust with verifiable governance, this is a strong signal.

Infrastructure & Availability

Trust services run from Aruba data centers meeting ANSI/TIA-942 Rating 4 (Tier IV-class) requirements, with a European hosting footprint. They do not claim to own the facilities directly; instead, they operate on Aruba’s Tier IV infrastructure. Specific city lists are not highlighted, but the stance is resilience and compliance over geography marketing.

Product Portfolio

SSL/TLS Certificates (DV, OV, EV)

A full spread from Domain Validation up through Organization and Extended Validation, with warranties and enterprise issuance options. The emphasis is TLS done by the book—server authentication plus encrypted channels for ecommerce and high-trust sites.

S/MIME

End-to-end email protection with identity assurance for users and organizations, aligned to regulated workflows and anti-phishing posture.

Code Signing

Publisher identity and integrity assurance for software distribution pipelines.

QWAC (Qualified Website Authentication Certificates)

EU eIDAS-qualified certificates for regulated use cases requiring qualified assurance.

PKI & Enterprise Trust

Managed PKI options and Actalis CertiManager, which centralizes certificate lifecycle tasks (CSR-based self-issuance, notifications, downloads, and inventory). This helps larger teams standardize issuance and renewals, cut outages from expirations, and enforce policy.

Digital Identity, Trusted IoT, DORA & NIS2

Solutions aimed at identity proofing, device trust, and regulatory alignment for EU frameworks, reflecting a focus on security governance rather than commodity certificates.

Management & Control

• Customer Area for ordering and account tasks.
• Actilis CertiManager (MPKI) for centralized discovery, issuance, renewals, and alerts at scale—crucial for enterprises juggling many SANs and endpoints.

Support & Operations

Specialist operators are reachable via phone and tickets, complemented by a knowledge base. This is a practitioner-grade support model—less "consumer chat," more structured assistance aligned to PKI workflows.

Pricing & Payments

Public pricing starts from €30.00 + VAT in some contexts, with DV entry points also shown at €50.00 + VAT / first year depending on the path and bundle. Payments are available via credit card (Banca Sella circuit) and PayPal, with specific guidance for public administration. Pricing is presented in EUR, with selectors that may display USD, GBP, PLN for reference.

Money-Back & Uptime

• Refunds: no standing "money-back guarantee." They allow 14-day refunds for certain products (e.g., SSL/Code Signing) when revoked/canceled within that window; after 14 days, standard withdrawal generally does not apply unless explicitly provided.
• Uptime/SLA: no formal uptime guarantee is published for trust services. Transparency leans on compliance and facility standards rather than SLAs with credits.

Languages & Localization

The website is available in English and Italian. Documentation and controls prioritize a European audience, with terminology aligned to EU regulations and procurement norms.

Strengths

• eIDAS-qualified CA with CAB Forum membership and a deep ISO certification portfolio.
• Tier IV-class data-center backbone via Aruba, emphasizing resilience and continuity.
• Enterprise-grade lifecycle tooling (CertiManager) that reduces operational risk from expirations and inconsistent issuance.
• Coverage beyond SSL—S/MIME, Code Signing, QWAC, PKI, Trusted IoT, and regulatory solutions (DORA/NIS2).

Caveats

• No broad money-back window; refunds are typically limited to 14 days for eligible products.
• No published uptime/SLA with service-credit mechanics.
• Infrastructure cities are not enumerated, which may matter to teams requiring granular data-residency disclosures beyond "EU / Tier IV-class."

🎯 Conclusion

Actalis is best viewed as a regulated trust-services partner rather than a generalist certificate shop. They combine EU-grade compliance, Tier IV-class hosting via Aruba, and enterprise lifecycle controls into a coherent offer for organizations that treat digital trust as a governance function. The trade-offs—limited refund window, absence of a formal uptime SLA, and sparse location details—are typical of compliance-led providers. For public entities, financial services, and enterprises working under EU frameworks, Actalis is a credible, standards-driven choice with the tooling to manage certificates at scale.

📢 Special pages

• About us
• Terms of Service
• Privacy