Home / Certificates / Single domain / Comodo EV SSL
Comodo EV SSL
Comodo EV SSL is an extended-validation (EV) certificate - the highest level of identity assurance.
Specification
Lifecycle facts update by date- Validation
- Extended (EV) — domain control + extended organisation checks
- Covers
- 1 domain
- Issuance
- 1-5 Days
- Certificate lifetime
- Up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029
- Validation reuse
- 200 days now · 100 days from 15 Mar 2027
- CAA record
- 0 issue "sectigo.com"
- Keys
- RSA 2048-bit or stronger · ECC P-256 / P-384
- Reissues
- Free and unlimited for the plan
- Server licensing
- Unlimited servers
- Relying-party warranty
- US$1,750,000
- Site seal
- Dynamic
- Issued by
- Comodo
Lifecycle on this plan
- 1Pay onceInvoice issued at payment.Day 0
- 2First certificateUp to 200 days, issued 1-5 Days after validation.Day 0–5
- 3Reactivate freeWe email you before it ends; one click issues the next certificate for the rest of the plan.Before expiry
- 4Plan endsRenew only to go beyond the plan end date.Plan end
Included
Included · not in this product- Extended Validation✓
- Single domain✓
- Highest Level of Validation✓
- Business Validated✓
- SAN / Multi-Domain Support—
- Wildcard Support—
- Dynamic Site Seal✓
- Unlimited Server Licensing✓
- Unlimited Reissues✓
- Vulnerability Assessment—
- Malware Scan—
- Validation guidance · renewal reminders · assisted resolution✓
Questions
How fast is it issued?
Typically 1-5 days: the CA runs extended checks on your organisation as well as the domain.
Do I pay again when this certificate expires?
Not within your plan. Certificates now last up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029. When one nears its limit, reactivate it free from your dashboard; you pay again only to go beyond your plan's end date.
Can I use an ECC key?
Yes — generate a P-256 or P-384 CSR on your server, or with our CSR generator, which runs in your browser. RSA 2048-bit or stronger works too.
Which validation method should I use?
Pick DNS, HTTP file or email after purchase. DNS is the easiest to keep in place for every certificate in your plan. The CA checks it from several networks, so the record must be public — the DNS check on your certificate page shows exactly what it will look for.
My domain has CAA records — will issuance fail?
Only if they don't allow this CA. If your domain publishes CAA records, one must allow sectigo.com. The DNS check on your certificate page flags this and shows the exact record to add.
Can I reissue with a new private key?
Yes — reissues are free and unlimited for your whole plan, from your dashboard (new key, new CSR).
Recently viewed
DigiCert
EV
DigiCert Basic EV (FLEX)
$468.00/yr
View