Request Flex certificate
Annual plans
As of February 24, 2026, DigiCert TLS/SSL certificate plans are one year by default. Learn more about DigiCert annual plans.
Flex certificates are DigiCert TLS certificates that support any combination of fully qualified domain names (FQDNs) and wildcard domains. This allows you to add, remove, and rearrange subject alternative names (SANs) during the certificate lifetime without changing products.
Flex certificates are available to all CertCentral account types — Enterprise, Partner, Legacy, and Subscription.
Notice
For equivalent TLS products on Enterprise, Partner, and Legacy accounts, see Request OV TLS/SSL certificate and Request EV TLS/SSL certificate .
Before you begin
A CSR must be generated and ready to paste. See Generate a certificate signing request (CSR).
The organization must be active and assigned to the correct domains in your account.
For OV Flex certificates, organization validation must be current.
For immediate certificate issuance, domain and organization validation must be complete before submitting the request.
Notice
With Flex certificates, you must include both versions of the domain directly in the CertCentral request. For example, if you want to secure example.com, you must also add separately. Both versions are not added automatically. This also applies to wildcard domains and multi-level subdomains. CertCentral ignores the common name and SANs in your CSR. Include all domains you want covered directly in the request form.
Start a certificate request
For Enterprise, Partner, and Legacy accounts:
In the CertCentral main menu, go to Certificates > Request certificate.
Select the Flex product.
For Subscription accounts:
In the CertCentral main menu, go to My digital trust products > My subscription.
Find your Flex certificate subscription and select Actions > Request a certificate.
Enter certificate details
Enter the common name (primary domain).
Add any additional subject alternative names (SANs) if required.
Select the certificate validity period.
Paste the certificate signing request (CSR).
Select the server platform.
Notice
You cannot add domains when requesting a duplicate Flex certificate. To add domains, reissue the certificate first and then request the duplicate. You can rearrange and remove domains on a duplicate without reissuing.
Select or add the organization
Select an existing validated organization from the list.
If the organization is not listed, select Add organization and complete the organization details.
If the organization has not been validated for the required certificate type, DigiCert must complete organization validation before issuance.
Select a domain validation method
Select a supported DCV method for each domain on the order.
Complete validation from the Order details page.
Flex certificates support domain validation reuse within the allowed reuse period for OV validation. If all domains are prevalidated and organization validation is current, DigiCert may issue the certificate immediately after submission.
Submit the request
Review the order details.
Select the payment method.
Read and accept the Certificate Services Agreement.
Select Submit.
After submission, the certificate remains pending until required domain and organization validations are complete. DigiCert issues the certificate after all required validations and approvals are complete.
What's next
Manage pending orders to monitor the status of your submitted request and complete any outstanding validation steps