Encrypt the connection between your website and its visitors. Compare domain, organization and extended validation certificates and wildcard options, each available for one, two or three years.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
The CA checks that you control the domain. Issued quickly, no organization details in the certificate.
Learn moreThe CA also verifies that your organization exists and asked for the certificate.
Learn moreThe most detailed organization checks, defined by the CA/Browser Forum EV Guidelines.
Learn morePasswords, forms and payment details travel encrypted over HTTPS.
Visitors’ browsers check that the certificate was issued for the name they opened.
OV and EV certificates carry the verified organization name in the certificate details.
Chrome has labelled plain HTTP pages as not secure since 2018.
Every publicly trusted certificate is recorded in Certificate Transparency logs, so mis-issued ones can be detected.
With SNI, many sites and certificates share one IP address on the same server.
The encryption is the same at every level. What changes is how much the certificate authority verifies before issuing.
| Feature | DV |
OV | EV |
|---|---|---|---|
| What the CA checks | Control of the domain | Domain plus organization identity and address | Legal, physical and operational existence |
| Organization name in the certificate | Not included | Included | Included |
| Typical issuance | Minutes after validation | A few business days | A few business days |
| Wildcard available | Included | Included | No, not allowed for EV |
| Typical use | Blogs, personal sites, internal tools | Company sites and customer logins | Payments and sensitive data |
The schedule was adopted by the CA/Browser Forum in ballot SC-081v3. It applies to every publicly trusted TLS certificate, whichever brand you choose.
Until 14 March 2026
The longest validity publicly trusted TLS certificates could have.
From 15 March 2026
Today’s limit under the CA/Browser Forum Baseline Requirements. Domain validation can be reused for up to 200 days.
From 15 March 2027
Certificates and domain validation reuse both drop to 100 days.
From 15 March 2029
Certificates last at most 47 days and domain validation can be reused for only 10 days, so renewal has to be automated.
Because no certificate may be valid for more than 200 days today, a longer term works as a subscription: the certificate is reissued during the term each time it nears the end of its lifetime, and domain or organization validation is repeated when the reuse periods require it. You pay for the term once instead of buying a new certificate every time.
Pick the product, location and billing cycle that fit your project.
Review your cart and pay with one of the available payment methods.
We email your login details as soon as the service is ready.
Open a support ticket from the client area and follow every reply.
Malware scanning and removal plans from SiteLock.
Uptime, performance and SSL certificate checks with alerts.
Web hosting for websites, blogs and online shops, with your choice of control panel.
Learn moreLiteSpeed hosting with LSCache, Redis and your choice of control panel.
Learn moreCodeGuard backups of your website files and databases.
An SSL certificate (today a TLS certificate) binds your domain name to a cryptographic key. Browsers use it to encrypt the connection to your site over HTTPS and to check that they are talking to the right server.
The encryption is the same; the checks before issuance differ. For DV the certificate authority confirms control of the domain. For OV it also verifies the organization’s identity and address. For EV it follows the CA/Browser Forum EV Guidelines: legal, physical and operational existence, and the authority of the person who requests the certificate.
Since 15 March 2026 a publicly trusted TLS certificate can be valid for at most 200 days. The limit drops to 100 days on 15 March 2027 and to 47 days on 15 March 2029 (CA/Browser Forum ballot SC-081v3). Longer purchase terms are subscriptions in which the certificate is reissued.
The certificate authority asks you to answer an email sent to a standard address of the domain (such as admin@ or webmaster@), to add a DNS record or to place a file on your web server. Validation through WHOIS contact details is no longer allowed since July 2025, and the CA/Browser Forum has decided to phase out the email and phone methods by 15 March 2028, leaving the DNS and web server methods.
No. Server Name Indication (SNI) lets many sites with their own certificates share one IP address, and every current browser supports it.
One price for the whole term. Within it, the certificate is reissued whenever it reaches its maximum lifetime, and domain or organization validation is repeated when the reuse periods require it.
A DV certificate is usually issued within minutes of completing domain validation. OV and EV certificates need the organization checks first, which usually take a few business days and go faster when your company details are easy to verify in official sources.
No. Chrome and Firefox removed the company name from the address bar in 2019. The verified organization details are shown when a visitor opens the site information or certificate viewer.
Google announced HTTPS as a lightweight ranking signal in 2014 and counts it as part of a good page experience. It is not a shortcut to higher rankings, but browsers mark plain HTTP pages as not secure, which visitors notice.
Free certificates such as Let’s Encrypt are domain validated and are renewed automatically; our Linux, Windows and reseller hosting plans list a free SSL certificate in their features. A paid certificate is the choice when you need organization or extended validation, a wildcard from a commercial certificate authority, or a specific brand.
Every plan lists the billing cycles it is offered with. Switch the cycle above the plans to compare prices; longer cycles show the saving against monthly billing when there is one.
Choose one of the payment methods offered at checkout. Every invoice also stays available in the client area, where you can pay it online.
Your service appears in the client area as soon as it is set up. From there you can manage it, pay invoices and open support tickets.
Send us a message and our team will help you choose the right service.
