Secure Your Website with SSL
DigiCert, GeoTrust & PerfectSSL certificates with automated provisioning.
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $829.07 USD
- Warranty — $1M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $525.75 USD
- Warranty — $1M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $631.35 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $363.98 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $1,118.90 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $2,642.23 USD
- Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $1,321.12 USD
- Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $1,070.60 USD
- Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $593.15 USD
- Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $2,871.41 USD
- Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $4,313.85 USD
- Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $2,156.92 USD
- Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $2,992.73 USD
- Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $1,496.37 USD
- Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $5,675.41 USD
- Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $204.32 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $109.53 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $497.10 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $497.10 USD
- Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $328.59 USD
- Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $394.59 USD
- Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $227.49 USD
- Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $699.32 USD
- Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $27.52 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $10.67 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $83.69 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $322.98 USD
- Warranty — $50k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $167.95 USD
- Warranty — $50k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $167.95 USD
- Warranty — $25k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $72.46 USD
- Warranty — $25k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $392.63 USD
- Warranty — $25k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $13.48 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
RapidSSL (DigiCert-owned legacy brand) is the budget DV option in our catalog — purpose-built for rapid automated issuance with no organisation verification overhead. Choose RapidSSL when you need TLS encryption (HTTPS, SMTP-STARTTLS, IMAP-TLS) and the cheapest commercial DV cert that's universally trusted, but you don't need any business-identity signal for end users.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $54.34 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
RapidSSL (DigiCert-owned legacy brand) is the budget DV option in our catalog — purpose-built for rapid automated issuance with no organisation verification overhead. Choose RapidSSL when you need TLS encryption (HTTPS, SMTP-STARTTLS, IMAP-TLS) and the cheapest commercial DV cert that's universally trusted, but you don't need any business-identity signal for end users.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $13.06 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $113.40 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $290.52 USD
- Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $105.84 USD
- Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $44.04 USD
- Warranty — $50k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $28.08 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $8.16 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $75.60 USD
- Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $286.80 USD
- Warranty — $250k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $129.96 USD
- Warranty — $250k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 100
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $596.52 USD
- Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $394.31 USD
- Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 5–7 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Extended Validation (EV) — the most rigorous identity check
EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.
Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.
Pick EV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $473.51 USD
- Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $272.99 USD
- Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $839.18 USD
- Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
- Issuance time — 1–3 business days
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Organization Validation (OV) — verified identity in the certificate
In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.
Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.
Pick OV when
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Multi-Domain (SAN) coverage
Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example
example.com+example.net+app.example.io+partner-portal.comall share one cert and one private key.Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.
Certificate details
- Annual price — $245.18 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 250
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Single Domain coverage
Secures one fully-qualified domain (FQDN), with the
www.and apex variants both covered as a convention (example.com+www.example.comshare one cert). Other subdomains (e.g.app.example.com,api.example.com) require their own certificates.The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.
Certificate details
- Annual price — $131.44 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — up to 1
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field
-
DV shows only the domain name, not company name or registered address.
Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.
Wildcard coverage
Secures a base domain and all first-level subdomains under a single certificate (
example.com+*.example.com). One cert coversapp.example.com,api.example.com,staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.The right choice when you operate multi-tenant SaaS with customer subdomains (
), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level —.app.example.com .example.comdoes NOT cover.app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.Certificate details
- Annual price — $596.52 USD
- Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
- Issuance time — minutes (automated)
- Domains covered — 1 base + unlimited subdomains (*.example.com)
- Validity — 1 year (annual renewal)
- Reissue — free unlimited reissues during the validity period
- Refund — 30-day money-back guarantee on most certificate types
Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.
Domain Validation (DV) — fastest path to HTTPS
The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.
DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field