Secure Your Website with SSL

DigiCert, GeoTrust & PerfectSSL certificates with automated provisioning.

DigiCert Basic EV Multi Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $829.07 USD
    • Warranty — $1M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

DigiCert Basic EV Single Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $525.75 USD
    • Warranty — $1M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

DigiCert Basic OV Multi Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $631.35 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Basic OV Single Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $363.98 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Basic OV Wildcard
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $1,118.90 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Secure Site EV Multi Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $2,642.23 USD
    • Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

DigiCert Secure Site EV Single Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $1,321.12 USD
    • Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

DigiCert Secure Site OV Multi Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $1,070.60 USD
    • Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Secure Site OV Single Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $593.15 USD
    • Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Secure Site OV Wildcard
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $2,871.41 USD
    • Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Secure Site Pro EV Multi Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $4,313.85 USD
    • Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

DigiCert Secure Site Pro EV Single Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $2,156.92 USD
    • Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

DigiCert Secure Site Pro OV Multi Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $2,992.73 USD
    • Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Secure Site Pro OV Single Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $1,496.37 USD
    • Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

DigiCert Secure Site Pro OV Wildcard
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $5,675.41 USD
    • Warranty — $2M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

DigiCert is the world's largest commercial certificate authority by issuance volume and the trust root behind a majority of top-100 enterprise websites. Their certificates are issued from the DigiCert Global Root CA, present in every modern browser, OS, and mobile platform's trust store. DigiCert is the natural choice when "must work everywhere, no compatibility surprises" outranks price.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

GeoTrust DV SSL Multi Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $204.32 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

GeoTrust DV SSL Single Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $109.53 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

GeoTrust DV SSL Wildcard
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $497.10 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

GeoTrust TrueBusiness ID EV Multi Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $497.10 USD
    • Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

GeoTrust TrueBusiness ID EV Single Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $328.59 USD
    • Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

GeoTrust TrueBusiness ID OV Multi Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $394.59 USD
    • Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

GeoTrust TrueBusiness ID OV Single Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $227.49 USD
    • Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

GeoTrust TrueBusiness ID OV Wildcard
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $699.32 USD
    • Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

GeoTrust is a long-established business-grade CA brand (originally founded 2001, now under the DigiCert umbrella). The TrueBusiness ID and QuickSSL product lines are widely used for OV and EV certificates by SMBs and mid-market organisations that need verified-identity trust signals at a more accessible price point than tier-1 DigiCert.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

PerfectSSL DV SSL Multi Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $27.52 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

PerfectSSL DV SSL Single Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $10.67 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

PerfectSSL DV SSL Wildcard
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $83.69 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

PerfectSSL EV SSL Multi Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $322.98 USD
    • Warranty — $50k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

PerfectSSL EV SSL Single Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $167.95 USD
    • Warranty — $50k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

PerfectSSL OV SSL Multi Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $167.95 USD
    • Warranty — $25k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

PerfectSSL OV SSL Single Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $72.46 USD
    • Warranty — $25k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

PerfectSSL OV SSL Wildcard
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $392.63 USD
    • Warranty — $25k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

PerfectSSL is the Realtime Register own-brand certificate line, issued from established CA roots (chained under Sectigo/Comodo). It delivers the same browser/OS trust as the major-brand DV/OV/EV certs at a value price point — ideal when you need legitimate commercial TLS for production sites but don't need a brand-logo trust seal for end users.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

RapidSSL Standard DV Single Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $13.48 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

RapidSSL (DigiCert-owned legacy brand) is the budget DV option in our catalog — purpose-built for rapid automated issuance with no organisation verification overhead. Choose RapidSSL when you need TLS encryption (HTTPS, SMTP-STARTTLS, IMAP-TLS) and the cheapest commercial DV cert that's universally trusted, but you don't need any business-identity signal for end users.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

RapidSSL Wildcard DV Wildcard
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $54.34 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

RapidSSL (DigiCert-owned legacy brand) is the budget DV option in our catalog — purpose-built for rapid automated issuance with no organisation verification overhead. Choose RapidSSL when you need TLS encryption (HTTPS, SMTP-STARTTLS, IMAP-TLS) and the cheapest commercial DV cert that's universally trusted, but you don't need any business-identity signal for end users.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Sectigo EssentialSSL Single Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $13.06 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Sectigo EssentialSSL Wildcard
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $113.40 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Sectigo EV Multi Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $290.52 USD
    • Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

Sectigo EV Single Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $105.84 USD
    • Warranty — $1.8M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

Sectigo InstantSSL Single Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $44.04 USD
    • Warranty — $50k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

Sectigo PositiveSSL Multi Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $28.08 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Sectigo PositiveSSL Single Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $8.16 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Sectigo PositiveSSL Wildcard
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $75.60 USD
    • Warranty — $10k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Sectigo PremiumSSL Wildcard
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $286.80 USD
    • Warranty — $250k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Sectigo Unified Communications Multi Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $129.96 USD
    • Warranty — $250k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 100
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Sectigo (formerly Comodo CA, rebranded 2018) is one of the most widely-issued commercial CA roots on the internet, with strong native browser compatibility and one of the broadest cert portfolios available. The PositiveSSL/EssentialSSL/InstantSSL legacy product lines are particularly popular for hosters and agencies serving SMB customers — solid trust signals at competitive pricing.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Thawte SSL Webserver EV Multi Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $596.52 USD
    • Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

Thawte SSL Webserver EV Single Domain
  • you operate in regulated industries (finance, healthcare, government), high-value e-commerce, B2B SaaS handling sensitive customer data, or any context where the strongest available identity assertion is required by policy, contract, or risk profile.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $394.31 USD
    • Warranty — $1.5M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 5–7 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Extended Validation (EV) — the most rigorous identity check

EV is the strictest commercial validation level, governed by the CA/Browser Forum EV Guidelines. The CA performs full OV checks plus additional verification of physical operational presence, exclusive operational control of the domain, and the legal/operational authority of the requesting representative.

Issuance typically takes 5–7 business days due to the extra verification steps and required legal-officer signatures. Modern browsers no longer show the green address bar that legacy EV certs displayed, but the verified organisation name is still recorded in the certificate and visible to anyone who inspects it. EV certs continue to carry the strongest CA-issued identity assertion and the highest warranty levels.

Pick EV when

Thawte SSL Webserver OV Multi Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $473.51 USD
    • Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

Thawte SSL Webserver OV Single Domain
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $272.99 USD
    • Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

Thawte SSL Webserver OV Wildcard
  • you operate a registered business and want the certificate to show your verified company name, you process customer payments or sensitive data on the site, you need a trust signal stronger than DV but don't need the full EV process.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $839.18 USD
    • Warranty — $1.3M (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — 1–3 business days
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Organization Validation (OV) — verified identity in the certificate

In addition to domain control, the CA verifies the legal existence and operational status of your organisation against authoritative business registries, plus a phone-call verification to a publicly-listed company number. The resulting certificate's Subject field includes the verified company name and registered address.

Issuance typically takes 1–3 business days while documents are reviewed. The validation result is shown in every browser when a user inspects the certificate, providing a stronger trust signal than DV for business-to-business and commerce sites.

Pick OV when

Thawte SSL123 DV Multi Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Multi-Domain (SAN) coverage

    Secures multiple distinct domains under a single certificate using the SubjectAltName (SAN) extension — for example example.com + example.net + app.example.io + partner-portal.com all share one cert and one private key.

    Typically includes 1 base domain + 2 additional SANs in the entry tier, with additional SAN slots available as paid add-ons up to the per-certificate maximum. Useful when you operate several related sites and want to consolidate renewal management and reduce the number of certificate files your servers need to deploy.

    Certificate details

    • Annual price — $245.18 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 250
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Thawte SSL123 DV Single Domain
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Single Domain coverage

    Secures one fully-qualified domain (FQDN), with the www. and apex variants both covered as a convention (example.com + www.example.com share one cert). Other subdomains (e.g. app.example.com, api.example.com) require their own certificates.

    The simplest and most common coverage type. Choose Single Domain when you have one canonical site, or when the additional subdomains you operate are best served by their own scoped certificates rather than a shared wildcard.

    Certificate details

    • Annual price — $131.44 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — up to 1
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field

Thawte SSL123 DV Wildcard
  • DV shows only the domain name, not company name or registered address.

    Pick DV when: you need HTTPS for personal sites, dev/staging environments, SaaS apps where users authenticate before seeing data, API endpoints, internal tools, or any case where the padlock is the trust signal that matters and an organisation seal is not required.

    Wildcard coverage

    Secures a base domain and all first-level subdomains under a single certificate (example.com + *.example.com). One cert covers app.example.com, api.example.com, staging.example.com, and any other first-level subdomain you create — present or future, no re-issue needed.

    The right choice when you operate multi-tenant SaaS with customer subdomains (.app.example.com), microservices on subdomains, or any architecture where new subdomains are routine. Note that wildcards cover only one level — .example.com does NOT cover .app.example.com. For multi-level wildcards or arbitrary domain combinations, a Multi-Domain (SAN) certificate is the right fit.

    Certificate details

    • Annual price — $596.52 USD
    • Warranty — $500k (insurance coverage backed by the CA in case of misissuance)
    • Issuance time — minutes (automated)
    • Domains covered — 1 base + unlimited subdomains (*.example.com)
    • Validity — 1 year (annual renewal)
    • Reissue — free unlimited reissues during the validity period
    • Refund — 30-day money-back guarantee on most certificate types

Thawte is one of the oldest CA brands in the industry (founded 1995 in South Africa, acquired through VeriSign → Symantec → DigiCert). The Thawte trust seal is recognised in business-to-business contexts as a long-standing mark of identity verification, particularly for international e-commerce and SaaS where buyer trust signals carry weight.

Domain Validation (DV) — fastest path to HTTPS

The CA verifies only that you control the domain (via DNS TXT, file upload, or email challenge). No business identity verification, no organisational documents required. Issuance is fully automated and typically completes in minutes.

DV certificates encrypt traffic identically to OV/EV certs and trigger the padlock icon in every browser. The difference is the level of information published in the certificate's Subject field