Flex certificates

DigiCert offers certificates that support any type of domain configuration and can be ordered as single-domain or multi-domain certificates with any combination of fully qualified domain name (FQDN) and wildcard SANs.

This gives you the flexibility to order the certificates you want and add additional SANs during your certificates' lifetime without needing to change products. These certificates do not have dedicated multi-domain or wildcard versions. Instead, you add those as you configure the base certificate.

Which certificates have flex capabilities?

Name Product identifier
For use with the Services API
Basic OV ssl_basic
Basic EV ssl_ev_basic
Secure Site OV ssl_securesite_flex
Secure Site EV ssl_ev_securesite_flex
Secure Site Pro SSL ssl_securesite_pro
Secure Site Pro EV SSL ssl_ev_securesite_pro
Thawte SSL 123 DV ssl_dv_thawte
Thawte SSL Webserver OV ssl_thawte_webserver
Thawte SSL Webserver EV ssl_ev_thawte_webserver
GeoTrust DV SSL (the Geotrust Standard DV SSL is not a flex product) ssl_dv_geotrust_flex
GeoTrust TrueBusiness ID OV ssl_geotrust_truebizid
GeoTrust TrueBusiness ID EV ssl_ev_geotrust_truebizid
Private SSL OV private_ssl_flex
Encryption Everywhere DV ssl_dv_ee


All DigiCert SSL certificates allow you to cover both the base domain and the www subdomain at no added cost. With flex certificates, you must include both versions in your request, because they will not be added automatically. This also applies to Wildcards (example.com available for free with *.example.com) and multi-level subdomains ( www.sub.example.com available for free with sub.example.com). If you are using the API, read how to configure your API request to include both versions of the domain for free.

The common name and SANs listed in your CSR are ignored. You must include all domains you want covered in your CertCentral or API request.


The total price of a flex certificate is calculated by the base price/value of the certificate, plus the total number of SANs:

Certificate base price/value + FQDN total (FQDN SAN price * Number of FQDN SANs) + Wildcard total (Wildcard SAN price * Number of wildcard SANs)*

*When ordering server licenses, multiply the above total by the total number of licenses.

When ordering through CertCentral, the price will update with the certificate's configuration. You can see the current price in the Transaction summary on the right-hand side of the Request page, or by using the order-pricing API.