DV
Best for starters
Issued in 10 minutes. HTTPS in one click.
Validates domain ownership only, so issuance is fast and inexpensive. A practical fit for blogs, brochure sites, staging environments and small business websites that need HTTPS without paperwork.
- Automated validation — no paperwork, no waiting
- 256-bit encryption trusted by every major browser
- RSA 2048 and ECC dual-algorithm support
- Unlimited free reissues while the certificate is valid
OV
For businesses
Your company name, verified and visible.
We verify your business registration as well as domain ownership. The certificate carries your legal entity name — the detail procurement teams and enterprise buyers actually check.
- Business identity verified against official registries
- Organization name shown in certificate details
- Up to $69,000 relying-party warranty
- Free reissues and deployment support included
EV
Highest assurance
The highest level of identity assurance.
Strict, standards-based vetting of your legal entity, physical address and operational existence. Chosen by banks, payment providers and government portals where trust must be demonstrated, not claimed.
- Full legal, physical and operational verification
- Highest trust tier issued by public CAs
- Up to $208,000 relying-party warranty
- Dedicated compliance specialist during validation
DV / OV
Unlimited subdomains
One certificate. Every subdomain.
Secures *.yourdomain.com and the apex in a single certificate. Add subdomains without reissuing, which keeps multi-tenant platforms and staging fleets simple.
- Unlimited first-level subdomains on one certificate
- No reissue needed when a new subdomain appears
- Available with DV or OV validation
- Works with Nginx, Apache, IIS and BT Panel
DV / OV
Up to 100 hostnames
Up to 100 hostnames, one expiry date.
Covers three hostnames out of the box and scales to one hundred, across different top-level domains. One renewal date, one deployment, one invoice.
- 3 hostnames included, expandable to 100
- Mix domains, subdomains and IPs on one certificate
- Single expiry date across your whole portfolio
- DV or OV validation per hostname
SM2
MLPS 2.0 ready
Compliant with OSCCA and MLPS 2.0.
Built on the SM2/SM3/SM4 suite for organizations that must meet China's Multi-Level Protection Scheme (MLPS 2.0) and cryptography assessment requirements. Supports dual-certificate deployment alongside RSA.
- SM2 signing with SM3 hashing and SM4 encryption
- Meets MLPS 2.0 Level 3 and cryptography assessment
- Dual-certificate deployment with RSA fallback
- Compatible with SM2-enabled browsers and gateways
OV
No domain needed
HTTPS for endpoints without a domain.
Issues directly to a public IPv4 or IPv6 address. Ideal for internal management consoles, API gateways, monitoring platforms and IoT devices that are reached by IP.
- Public IPv4 or IPv6 in the subject alternative name
- OV-level organization verification
- No DNS record required
- Works with browsers that support IP SANs
OV / EV
EV available
Ship software without warning dialogs.
Signs Windows executables, macOS applications and kernel drivers so users see your verified publisher instead of “Unknown publisher”. Supports hardware tokens and CI/CD signing.
- Removes “Unknown publisher” and SmartScreen warnings
- Windows, macOS and kernel driver signing
- EV hardware token or cloud HSM options
- Automate signing in CI/CD pipelines