SSL/TLS certificates worldwide
Support Updates Guides Tools Become a Reseller
BuySSL BuySSLCertificate Authority Reseller
Sign in Cart Buy a Certificate
Home / Certificates / Single domain / PositiveSSL
DV Sectigo

PositiveSSL

PositiveSSL is a domain-validated (DV) certificate - fast, automated issuance in minutes.

Specification

Lifecycle facts update by date
Validation
Domain (DV) — DNS record, HTTP file or email
Covers
1 domain
Issuance
Minutes after validation
Certificate lifetime
Up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029
Validation reuse
200 days now · 100 days from 15 Mar 2027
CAA record
0 issue "sectigo.com"
Keys
RSA 2048-bit or stronger · ECC P-256 / P-384
Reissues
Free and unlimited for the plan
Server licensing
Unlimited servers
Relying-party warranty
US$10,000
Site seal
Static
Issued by
Sectigo
Lifecycle on this plan
  1. 1
    Pay onceInvoice issued at payment.
    Day 0
  2. 2
    First certificateUp to 200 days, issued minutes after validation.
    Day 0–1
  3. 3
    Reactivate freeWe email you before it ends; one click issues the next certificate for the rest of the plan.
    Before expiry
  4. 4
    Plan endsRenew only to go beyond the plan end date.
    Plan end

Included

Included · not in this product
  • Issued in minutes✓
  • Unlimited free reissues✓
  • Highest Level of Validation—
  • Business Validated—
  • SAN / Multi-Domain Support—
  • Wildcard Support—
  • Static Site Seal✓
  • Unlimited Server Licensing✓
  • Unlimited Reissues✓
  • Vulnerability Assessment—
  • Malware Scan—
  • Validation guidance · renewal reminders · assisted resolution✓
Questions
How fast is it issued?
Usually within minutes of completing domain validation — issuance is automated.
Do I pay again when this certificate expires?
Not within your plan. Certificates now last up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029. When one nears its limit, reactivate it free from your dashboard; you pay again only to go beyond your plan's end date.
Can I use an ECC key?
Yes — generate a P-256 or P-384 CSR on your server, or with our CSR generator, which runs in your browser. RSA 2048-bit or stronger works too.
Which validation method should I use?
Pick DNS, HTTP file or email after purchase. DNS is the easiest to keep in place for every certificate in your plan. The CA checks it from several networks, so the record must be public — the DNS check on your certificate page shows exactly what it will look for.
My domain has CAA records — will issuance fail?
Only if they don't allow this CA. If your domain publishes CAA records, one must allow sectigo.com. The DNS check on your certificate page flags this and shows the exact record to add.
Can I reissue with a new private key?
Yes — reissues are free and unlimited for your whole plan, from your dashboard (new key, new CSR).
$11.00 / yr