Skip to main content

Flex certificates

DigiCert offers TLS certificates that support different types of domain configurations. Some can be ordered as single-domain or multi-domain certificates, while others can be ordered with any combination of fully qualified domain names (FQDNs) and wildcard domains.

OV TLS flex certificate combinations

EV TLS flex certificate combinations

  • Single domain

  • Multiple domains

  • Single wildcard domain

  • Multiple wildcard domains

  • Combination of domains and wildcard domains

  • Single domain

  • Multiple domains

This allows you to order the certificates you want and add additional subject alternative names (SANs) during your certificates' lifetime without changing products. These certificates do not have dedicated multi-domain or wildcard versions. Instead, you add those as you configure the base certificate.

Which certificates have flex capabilities?

Name

Product identifier For use with the Services API

Basic OV

ssl_basic

Basic EV

ssl_ev_basic

Secure Site OV

ssl_securesite_flex

Secure Site EV

ssl_ev_securesite_flex

Secure Site Pro SSL

ssl_securesite_pro

Secure Site Pro EV SSL

ssl_ev_securesite_pro

Thawte SSL 123 DV

ssl_dv_thawte

Thawte SSL Webserver OV

ssl_thawte_webserver

Thawte SSL Webserver EV

ssl_ev_thawte_webserver

GeoTrust DV SSL (the Geotrust Standard DV SSL is not a flex product)

ssl_dv_geotrust_flex

GeoTrust TrueBusiness ID OV

ssl_geotrust_truebizid

GeoTrust TrueBusiness ID EV

ssl_ev_geotrust_truebizid

Private SSL OV

private_ssl_flex

Encryption Everywhere DV

ssl_dv_ee

Configuration

All DigiCert SSL certificates allow you to cover both the base domain and the www subdomain at no added cost. With flex certificates, you must include both versions in your request, because they will not be added automatically. This also applies to Wildcards (example.com available for free with *.example.com) and multi-level subdomains ( www.sub.example.com available for free with sub.example.com). If you are using the API, read how to configure your API request to include both versions of the domain for free.

The common name and SANs listed in your CSR are ignored. You must include all domains you want covered in your CertCentral or API request.

In this section: