Learn
SSL guides
Short, practical explanations of how certificates work and what to expect when you order, validate, install and replace one.
Understand & choose
Understand the basics, then decide which identity checks and domain coverage you need.
-
What is an SSL certificate?
TLS protects data in transit and helps browsers authenticate the hostname. It does not certify that a business or its content is trustworthy.
Read guide -
DV vs OV vs EV: which validation level?
Choose DV, OV or EV for the identity checks you need. A higher validation level does not, by itself, make TLS encryption stronger.
Read guide -
Wildcard SSL explained
*.example.com covers one subdomain level. The bare domain and deeper subdomains need their own matching SAN entries.
Read guide -
Multi-Domain SSL explained
A SAN certificate covers its listed names. Count each hostname explicitly and check the product allowance before buying.
Read guide
Prepare & validate
Create your request and prove control of your domains before issuance.
-
What is a CSR and how do I create one?
A CSR is a signed request containing a public key. Keep its matching private key private and available for installation.
Read guide -
Domain validation methods (DNS, email, file)
Use a validation method for which you control the required DNS, mailbox or web server. Follow the exact instructions in the certificate setup.
Read guide
Install & maintain
Build the right chain, check your installation and keep certificates current.
-
Certificate chains and intermediate certificates
Install the leaf certificate with the required intermediates. A correct file bundle still needs to be deployed and checked on the server.
Read guide -
Renewal vs reissue: what is the difference?
Reissue replaces a certificate during the existing service. With a renewal, you purchase the next service period. Neither includes installing files on your server.
Read guide -
Why SSL certificate lifetimes are getting shorter
Your service period and each certificate expiry are separate. Track both, and allow time to validate and install each replacement.
Read guide