SSL/TLS certificates worldwide
Support Updates Guides Tools Become a Reseller
BuySSL BuySSLCertificate Authority Reseller
Sign in Cart Buy a Certificate

Buy trusted SSL certificates online.

Public-trust TLS from 6 certificate brands. Every validation step time-stamped, the DNS record, DNSSEC and CAA checked before they block issuance, and free reactivations as certificate lifetimes drop to 200 days and below.

Explore certificates Request a quotation
From $11.00/yr Secure card checkout Plans up to 5 years
Certificate inventoryIllustration · sample domains
api.example.comOVIssued142 days
pay.example.comEVReactivate21 days
*.example.comDV · WCValidating—
old.example.comDVCAA blocks—
DNS check · validation record found · DNSSEC valid · CAA allows only letsencrypt.org → add 0 issue "sectigo.com"
Issued by
ComodoThawteDigiCertGeoTrustRapidSSLSectigo
CA/Browser Forum · ballot SC-081

Maximum certificate lifetime is shrinking.

Each step means more reactivations and more domain re-checks. A plan bought today keeps working through every step — you reactivate free from your dashboard and we remind you first.

Until 14 Mar 2026
398 days
Validation reuse 398 days
From 15 Mar 2026
200 days
Validation reuse 200 days
From 15 Mar 2027
100 days
Validation reuse 100 days
From 15 Mar 2029
47 days
Validation reuse 10 days

Since 2025, CAs also confirm domain control and CAA from several network locations, so your DNS must answer the same everywhere.

Two readers, one record

What each side of the table gets.

Security teams

Evidence, not promises.

Every step time-stampedPaid, CSR submitted, validated, issued — shown in your own time zone.
DNS, DNSSEC and CAA checked firstYour certificate page shows the exact record to add, before the CA rejects the order.
Your key stays yoursRSA 2048-bit or stronger, or ECC P-256 / P-384. Our CSR generator runs in your browser.
Reissue and revoke yourselfFree, unlimited reissues for the whole plan; revoke, or add and remove domains on multi-domain certificates, from your certificate page.
Approvers

Predictable cost, no surprise outages.

Paid once, for up to 5 yearsReactivations within the plan cost nothing.
An invoice with every orderPrices exclude local taxes.
Quotation before you commitA PDF quotation for your purchase process — request one.
One account for every certificateOrders, invoices, reminders and every certificate's history in one dashboard.
On record

From order to expiry — every step logged.

  1. 01Choose & payPay by card in USD. Invoice issued.
  2. 02Submit CSRPaste yours or generate one in the browser.
  3. 03ValidateDNS record, DNSSEC and CAA checked before submission.
  4. 04IssuedDV in minutes · OV 1–3 business days · EV 3–5 business days.
  5. 05ReactivateFree within the plan, with reminders first.
Price list

Popular certificates

All 95+ certificates →
CertificateValidationCoversIssuancePer yearAction
RapidSSL Standard
RapidSSL
 DV 1 domain + www Instant $17.00 Configure RapidSSL Standard
Comodo Code Signing
Comodo
 OV 1 domain + www 1-3 Days $375.00 Configure Comodo Code Signing
GeoTrust TrueBusinessID
GeoTrust
 OV · SAN Several domains Instant $298.00 Configure GeoTrust TrueBusinessID
PositiveSSL
Sectigo
 DV 1 domain + www Minutes $11.00 Configure PositiveSSL
Thawte SSL Web Server
Thawte
 OV 1 domain + www Instant $128.00 Configure Thawte SSL Web Server

Prices per year in USD. Prices exclude local taxes. Every product is in the full catalogue.

Free expiry monitor

Watch every certificate you run — wherever you bought it.

Email alerts 30, 14 and 3 days before expiry, for up to 20 websites per email address. Stop any time in one click.

Set up free alerts Check DNS & CAA
Do I buy again every 200 days?
No. A plan of 1 year or more is paid once; when a certificate nears its limit you reactivate it free from your dashboard until the plan ends. Certificates now last up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029.
Do you install certificates for me?
No — we don't install certificates. When yours is issued, your certificate page has the files and step-by-step guides for your server.
Which CAA record do I need?
sectigo.com for Sectigo and Comodo; digicert.com for RapidSSL, GeoTrust, Thawte and DigiCert. You only need one if your domain already publishes CAA records — the DNS check on your certificate page tells you.
Can my purchasing team get a quotation first?
Yes. Ask for a quotation with the certificates and terms you need; you'll get a PDF to approve, and can then pay online.

Ready to put a certificate on record?

Every certificate side by side — validation, coverage and price per year.

Compare certificates Help me choose