Flex certificate enrollment in CertCentral
Flex certificate enrollment supports environments with dynamic domain inventories and flexible certificate coverage. It allows organizations to manage multiple domains and validation types within a single certificate configuration.
Compared to standard TLS certificate enrollment, Flex enrollment:
Supports multiple validation types, including Domain Validation (DV), Organization Validation (OV), and Extended Validation (EV)
Allows flexible management of Subject Alternative Names (SANs)
Reduces operational overhead for environments with frequently changing domains
The Flex enrollment process includes the following stages:
Submit a certificate request with flexible domain coverage
Define domain validation types and certificate configuration
Complete validation based on selected validation types
Issue the certificate after validation is completed
Which certificates have Flex capabilities
The following certificates have Flex capabilities:
Product | API identifier |
|---|---|
Basic OV | |
Basic EV | |
Secure Site OV | |
Secure Site EV | |
Secure Site Pro SSL | |
Secure Site Pro EV SSL | |
Thawte SSL123 DV | |
Thawte SSL Webserver OV | |
Thawte SSL Webserver EV | |
GeoTrust DV SSL | |
GeoTrust TrueBusiness ID OV | |
GeoTrust TrueBusiness ID EV | |
Private SSL OV | |
Encryption Everywhere DV | |
Notice
The products visible in your account depend on your account configuration. Contact your DigiCert account manager to enable additional Flex products.
Lifecycle considerations
After issuance, Flex certificates follow the same lifecycle processes as other TLS certificates: renewal before expiration, reissue when domain coverage or SANs change, revocation if required, and visibility and management across large or dynamic domain inventories.
What's next
Review enrollment and validity options in CertCentral to understand how certificates are requested, validated, and renewed