DigiCert is one of the largest certificate authorities in the world. It sells TLS/SSL certificates for websites, code signing certificates for software publishers, document and email signing certificates, and CertCentral, the account console where DigiCert customers order, validate and renew everything in one place.
A DigiCert order goes well when three things are right before checkout: the validation level, the number of names the certificate covers, and the plan length. Get one of those wrong and you either pay for something you do not need or reissue later.
Validation level: what DV, OV and EV actually prove
Domain Validation (DV) proves only that you control the domain. DigiCert can issue it in minutes once a DNS record, file or email check passes. It encrypts traffic exactly as well as the pricier options.
Organisation Validation (OV) adds a check that your company is real and registered. DigiCert verifies the legal name and details, which then appear in the certificate for anyone who inspects it.
Extended Validation (EV) is the strictest vetting DigiCert offers. Browsers no longer show a green bar for EV, so the benefit is mainly for regulated sectors, procurement checklists and brand-protection policies. If nobody is asking you for EV, OV or DV is usually enough.
One name, many names or a wildcard
A single-domain DigiCert certificate usually covers the name and its www version. A wildcard covers every first-level subdomain, such as shop.example.com and mail.example.com, but not deeper levels like a.b.example.com.
A multi-domain (SAN) certificate covers a list of unrelated names, which suits one server hosting several brands. Wildcards cannot be EV, so an organisation that needs EV on many names buys a multi-domain EV certificate instead.
Count your hostnames before ordering. Adding SANs to a DigiCert order later is possible but costs extra per name, and reissuing takes time you may not have at renewal.
Secure Site, Basic and the brand family
DigiCert sells its certificates in tiers. The premium Secure Site and Secure Site Pro lines add extras such as a higher warranty, priority support and, on Pro, extra security tooling. Basic DigiCert certificates cover the same encryption without those add-ons.
DigiCert also owns the GeoTrust, Thawte and RapidSSL brands, which are sold at lower prices, often through resellers. The encryption is the same; the difference is the name on the certificate, support level and validation options. Compare the DigiCert page with those brands if price matters more than the DigiCert name.
Code signing: the hardware rule
Since 2023, industry rules require code signing private keys to be stored on hardware: a secure USB token, a hardware security module, or a cloud signing service. A DigiCert code signing order therefore includes a choice of how the key is held.
If you pick a physical token, allow shipping time before your release date. Teams with build servers often find DigiCert's cloud-based signing easier than passing a token around. EV code signing helps new software build trust with Windows SmartScreen faster; standard OV code signing is cheaper.
Plan length and the shrinking certificate lifetime
No public TLS certificate can currently last longer than about 13 months, and the CA/Browser Forum has voted to cut that maximum in stages, starting in 2026 and continuing to 2029. A DigiCert multi-year plan is a subscription that lets you reissue a new certificate each time the old one runs out, at a locked price.
Multi-year DigiCert plans are usually cheaper per year than buying annually. The trade-off is that you still have to install each reissue, and as lifetimes shorten that happens more often. Automating renewals through ACME or DigiCert's management tools is worth setting up now rather than later.
Where the DigiCert savings are
The 15% DigiCert code is the stronger of the two and matters most on OV, EV, wildcard and multi-domain certificates, where the base price is highest. On a basic DV certificate the saving is small in absolute terms.
Use the 10% code if the 15% one is refused on your product. DigiCert codes do not usually stack, and promotions may exclude renewals, enterprise contracts or CertCentral account pricing, so enter the code in the basket and check the total before you pay.
On a multi-year plan, a percentage code applies to the whole upfront amount, so the saving is larger in cash terms. Only commit to a long plan if you are sure the site or product will still exist for that period.
Common questions
Is a DigiCert DV certificate less secure than EV?
No. The encryption is the same. EV adds identity vetting, not stronger encryption.
Does a DigiCert wildcard cover the root domain?
DigiCert wildcards normally include the bare domain as well as first-level subdomains. Check the product page for the current terms.
How long does DigiCert validation take?
DV can be minutes. OV and EV depend on how quickly DigiCert can verify your company records, so start well before your old certificate expires.
Can I switch from another CA to DigiCert mid-term?
Yes, you simply issue a new DigiCert certificate and install it. Ask DigiCert whether any remaining time can be credited.
| Discount | Type | Get the deal |
|---|---|---|
| 15% off | Promo code | View at Digicert → |
| 10% off | Promo code | View at Digicert → |