SSL/TLS certificates worldwide
Support Updates Guides Tools Become a Reseller
BuySSL BuySSLCertificate Authority Reseller
Sign in Cart Buy a Certificate
Home / Certificates / Single domain / DigiCert Basic EV (FLEX)
EV DigiCert

DigiCert Basic EV (FLEX)

DigiCert Basic EV (FLEX) is an extended-validation (EV) certificate - the highest level of identity assurance.

Specification

Lifecycle facts update by date
Validation
Extended (EV) — domain control + extended organisation checks
Covers
1 domain
Issuance
2-24 hours
Certificate lifetime
Up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029
Validation reuse
200 days now · 100 days from 15 Mar 2027
CAA record
0 issue "digicert.com"
Keys
RSA 2048-bit or stronger · ECC P-256 / P-384
Reissues
Free and unlimited for the plan
Server licensing
Unlimited servers
Relying-party warranty
US$1,750,000
Site seal
Dynamic
Issued by
DigiCert
Lifecycle on this plan
  1. 1
    Pay onceInvoice issued at payment.
    Day 0
  2. 2
    First certificateUp to 200 days, issued 2-24 hours after validation.
    Day 0–5
  3. 3
    Reactivate freeWe email you before it ends; one click issues the next certificate for the rest of the plan.
    Before expiry
  4. 4
    Plan endsRenew only to go beyond the plan end date.
    Plan end

Included

Included · not in this product
  • Extended Validation✓
  • Single domain✓
  • Highest Level of Validation✓
  • Business Validated✓
  • SAN / Multi-Domain Support—
  • Wildcard Support—
  • Dynamic Site Seal✓
  • Unlimited Server Licensing✓
  • Unlimited Reissues✓
  • Vulnerability Assessment—
  • Malware Scan—
  • Validation guidance · renewal reminders · assisted resolution✓
Questions
How fast is it issued?
Typically 2-24 hours: the CA runs extended checks on your organisation as well as the domain.
Do I pay again when this certificate expires?
Not within your plan. Certificates now last up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029. When one nears its limit, reactivate it free from your dashboard; you pay again only to go beyond your plan's end date.
Can I use an ECC key?
Yes — generate a P-256 or P-384 CSR on your server, or with our CSR generator, which runs in your browser. RSA 2048-bit or stronger works too.
Which validation method should I use?
Pick DNS, HTTP file or email after purchase. DNS is the easiest to keep in place for every certificate in your plan. The CA checks it from several networks, so the record must be public — the DNS check on your certificate page shows exactly what it will look for.
My domain has CAA records — will issuance fail?
Only if they don't allow this CA. If your domain publishes CAA records, one must allow digicert.com. The DNS check on your certificate page flags this and shows the exact record to add.
Can I reissue with a new private key?
Yes — reissues are free and unlimited for your whole plan, from your dashboard (new key, new CSR).
$468.00 / yr