Sectigo SSL Certificate Reviews

I have bought code signing certificates from another vendor for 11 years. For the past 3 years, they have reissued my SHA2 certificate (upon my request) for no charge as a SHA1 certificate, without revoking the SHA2 certificate. This let me dual sign our code with SHA2 and SHA1 (for compatibility with legacy devices). This year I looked at Comodo because their prices are 40% less than my old provider. At first, Comodo said they too will reissue the SHA2 certificate as a SHA1 without revoking the SHA2 at no additional cost, so that I can continue to dual sign code. But after buying the SHA2 certificate, there was no option to do that. Even calling customer support did not help. They couldn't do it either. The option to 'replace' the certificate also revokes the old cert (SHA2) 14 days later. You can't dual sign via Comodo, and SHA1 is simply not an option. Luckily, our clients who have used legacy devices just confirmed that they no longer need code signed with SHA1. So it all worked out in the end. I thought it would be helpful to share the above information, just in case there are others who need to dual sign code. Make sure you do your research. Not all CA's can/will reissue a SHA2 as a SHA1... My experience with Comodo was pleasant and professional. Fausta Diaz answered all of my questions and helped get my account setup and the certificate purchased. She was quick to return my calls, and never seemed to be in a hurry. Fausta stayed on the phone while I created my Comodo account and ordered the SHA2 certificate. Comodo's UI is a bit different from my old provider, so I appreciated being able to ask her questions throughout the process. Because I used Internet Explorer to purchase the certificate, I did not have to deal with CSR records. Once the company validation was done, Comodo sent me an email with a link to click, which installed the certificate (via Internet Explorer) into my personal certificate store. That was very convenient! I used my existing tools to export the certificate from my personal store, and create the PFX, PVK, SPC, and CER files that I need to handle all of our code signing needs. So even with company validation, I was signing code from all my development tools within 48 hours of buying the certificate. I will definitely stick with Comodo going forward, now that I don't need to sign code with SHA1 anymore.