Basic SSL certificates
Annual plans
As of February 24, 2026, DigiCert TLS/SSL certificate plans are one year by default. Learn more about DigiCert annual plans.
Notice
As of February 24, 2026, DigiCert stopped issuing public DV, OV, and EV TLS/SSL certificates with a maximum validity greater than 199 days, per new industry requirements. See How the 199-day limit affects reissues, duplicates, and renewals
Your CertCentral account includes Basic SSL and Business SSL certificates. Basic SSL certificates include: Standard SSL, EV SSL, Multi-Domain SSL, EV Multi-Domain, and Wildcard SSL. Business SSL certificates include: Secure Site Pro SSL, Secure Site Pro EV, Secure Site SSL, Secure Site EV SSL, Secure Site Multi-Domain SSL, Secure Site EV Multi-Domain SSL, and Secure Site Wildcard SSL.
Managing your TLS/SSL certificates throughout their lifecycle includes the following tasks:
Order certificates — Request a new Basic or Business SSL certificate from your account.
Complete domain control validation (DCV) — Before DigiCert issues your certificate, demonstrate control over each domain. Supported methods: Email, DNS TXT, DNS CNAME, HTTP Practical Demonstration.
Organization validation — Required for OV and EV certificates. Organizations must be revalidated every 397 days. EV validation is more thorough than OV and includes additional checks.
Access issued certificates — Download or email the certificate from your CertCentral account.
Reissue — Replace an existing certificate with updated information, such as adding a SAN to a multi-domain certificate.
Renew — Renew an expiring certificate order. If domain or organization validation has expired at renewal time, revalidation is required.
Revoke — Revocation is a three-step process: submit request → administrator approves → DigiCert revokes.
Legacy SSL products and their Flex replacements
DigiCert no longer issues the original Basic SSL products. These products have been replaced by newer Flex SSL products. The Flex products are named for the flexibility they offer: a single Flex certificate can cover a single domain, multiple domains, or wildcard domains without requiring a product change.
The following table shows the replacement mapping.
Legacy product | Flex replacement |
|---|---|
Standard SSL | Basic OV |
Multi-Domain SSL | Basic OV |
Wildcard SSL | Basic OV |
EV SSL | Basic EV |
EV Multi-Domain SSL | Basic EV |
Basic OV supports single domains, multiple domains and FQDNs, and wildcard domains.
Basic EV supports single domains and multiple domains and FQDNs.
Existing legacy SSL orders remain accessible under My digital trust products > Legacy Orders for viewing and downloading previously issued certificates. New requests, reissues, and renewals are not available for legacy SSL orders. To obtain a certificate, place a new request for the Flex replacement product.
For enrollment steps, see Request Flex certificate.
When to review certificate-specific enrollment
Some certificate types require additional steps beyond the basic enrollment flow. These include DV certificates, Flex certificates, and specialized certificate types.
What's new
Review DV TLS/SSL certificate enrollment to understand domain-only validation for fast certificate issuance