Flex certificates

DigiCert offers certificates that support any type of domain configuration and can be ordered as single-domain or multi-domain certificates with any combination of fully qualified domain name (FQDN) and wildcard SANs.

This gives you the flexibility to order exactly what they want and add additional SANs during the lifetime of their certificate without needing to change products. These certificates do not have dedicated multi-domain or wildcard versions, instead you add those as you configure the base certificate.

Which certificates have flex capabilities?

  • Basic OV
  • Basic EV
  • Secure Site SSL
  • Secure Site EV SSL
  • Secure Site Pro SSL
  • Secure Site Pro EV SSL
  • Thawte SSL 123 DV
  • Thawte SSL Webserver OV
  • Thawte SSL Webserver EV
  • GeoTrust DV SSL (the Geotrust Standard DV SSL is not a flex product)
  • GeoTrust TrueBusiness ID OV
  • GeoTrust TrueBusiness ID EV
  • Private SSL
  • Encryption Everywhere DV


All DigiCert SSL certificates allow you to cover both the base domain and the www subdomain at no added cost. With flex certificates, you must include both versions in your request, they will not be added automatically. This also applies to Wildcards (example.com available for free with *.example.com) and multi-level subdomains ( www.sub.example.com available for free with sub.example.com). If you are using the API, read how to configure your API request to include both versions of the domain for free.

The common name and SANs listed in your CSR are ignored. You must include all domains you want covered in your CertCentral or API request.


The total price of a flex certificate is calculated by the base price/value of the certificate plus the total number of SANs.

Flex certificate pricing:

Certificate base price/value + FQDN total (FQDN SAN price * Number of FQDN SANs) + Wildcard total (Wildcard SAN price * Number of wildcard SANs)*

*When ordering server licenses, multiply the above total by the total number of licenses.

When ordering through CertCentral, the price will dynamically update with the configuration of the certificate. You can see the current price in the Transaction summary on the right-hand side of the Request page, or using the order-pricing API.