Websites & Email · Domain validated · one website

Get one website onto HTTPS today

The cheapest certificate a browser will trust without complaint, and the right one for most websites. The authority checks one thing — that you control the domain — and signs within minutes. No paperwork, no phone call, no company documents.

  • Issued in minutes
  • No documents needed
  • Covers the domain and its www
  • Trusted by every browser
  • 28 certificates, from $14.99

What a visitor sees

Not secure acme.com

With no certificate, or one that has quietly expired. Chrome and Safari put this in front of your page before it has finished loading, and on a phone it is the first thing on the screen.

acme.com Secure

With any certificate on this page. Ordered, validated and installed inside an hour, and gone for a year or two at a time.

4.5 out of 5 from 409 published reviews left on the 28 certificates listed here. Every one of them is on its own product page, unedited — we do not hand-pick them.
  • The authority issues it, not usComodo, Sectigo, GeoTrust, Thawte, Certum and RapidSSL sign your certificate. Identical file, identical trust, lower price.
  • 10 days to change your mindA full refund or a swap to a different certificate. SSL certificates only. Read the policy.
  • Wrong one? We will say so firstSend us the hostnames before you buy and we will name the cheapest certificate that covers them — including when that is not the one you were about to order.
  • Comodo
  • Sectigo
  • Geotrust
  • Thawte
  • Certum
  • Rapidssl
  • Lowest price guaranteeFind the same certificate cheaper anywhere and we match it.
  • Free unlimited reissuesChange a hostname or move host mid-term at no cost.
  • Unlimited serversOne file on the load balancer, the app servers and staging.
  • Free installation supportcPanel, IIS, Nginx, load balancers and appliances.

What one of these actually covers

A single-domain certificate carries the name you order it for and, as standard, the www version of that name. Everything else is a different hostname as far as the browser is concerned, and a hostname the certificate does not carry produces the same full-screen warning as having no certificate at all.

Ordered for acme.com

Covered by this certificate

  • acme.com
  • www.acme.com

Not covered — you would need

Is this the right one for you?

The most expensive mistake on this site is buying the wrong shape and finding out at install time. Two lists, and the second one is a route out rather than a dead end.

Buy this if

  • The site runs on one name and you are not planning a second
  • It takes no card payments and no customer logins
  • Nobody has asked to see your company name inside the certificate
  • You want it live this afternoon rather than next week
  • You are replacing an expired certificate and need the warning gone now

Look at this instead if

What an unencrypted or expired site costs you

None of this shows up in your analytics as a certificate problem. It shows up as a bounce rate you cannot explain and a contact form nobody fills in.

  • “Not secure” sits in the address bar before a word is readChrome and Safari label every unencrypted page in the browser chrome itself, above your design and before your page has finished loading. On a contact form or a checkout that is the end of the session.
  • An expired certificate is a full-screen stop, not a badgeThe visitor gets an interstitial they have to click through, and most will not. Certificates lapse on whatever day and hour they were issued, which is regularly a Saturday.
  • Search and browsers both treat HTTPS as a floor, not a bonusIt has been a ranking signal for years, and modern browser features — geolocation, camera, service workers, the lot — are withheld from insecure origins outright.
  • The wrong hostname fails exactly like no certificateBuying for acme.com and serving www.acme.com, or covering the domain but not the subdomain your app runs on, produces the identical warning. It is the single most common mistake, and the panel above exists to prevent it.

If you would rather not read a price list

Three out of the 28 below, chosen for the three reasons people actually buy on. Every price, warranty and specification here is read from the catalogue, so it is what the cart will charge.

  • Our pick

    Comodo PositiveSSL Certificate

    The cheapest certificate on this site that every browser and mobile OS trusts, and the one we sell most of. Ordered, validated and installed inside an hour.

    • Domain validated · issued in minutes
    • One domainplus its www
    • $10,000 warranty
    • Unlimited servers · free unlimited reissues
    $14.99 $49 save 69% per year, before term discounts
    Full specification →
  • Best known name

    RapidSSL Certificate

    A different root and a brand your host’s documentation has probably heard of. Identical encryption and the same minutes to issue; buy it if something in your stack names it.

    • Domain validated · issued in minutes
    • One domainplus its www
    • $10,000 warranty
    • Unlimited servers · free unlimited reissues
    $16.95 $69 save 75% per year, before term discounts
    Full specification →
  • Largest warranty here

    Certum Commercial SSL Certificate

    A European authority in the same trust stores, with a warranty twenty times the size of the entry-level certificates for a few dollars more.

    • Domain validated · issued in minutes
    • One domainplus its www
    • €200,000 warranty
    • Unlimited servers · free unlimited reissues
    $18 $41 save 56% per year, before term discounts
    Full specification →

Every one we sell, cheapest first

All 28 of them, with the specifications that genuinely differ side by side. Any price is a buy button — it opens the same order card as the product page.

Certificate Validation Covers Warranty Issued in From
Comodo PositiveSSL Certificate Comodo DV One domainplus its www $10,000 Minutes $14.99 $49
Sectigo PositiveSSL Certificate Sectigo DV One domainplus its www $10,000 Minutes $14.99 $49
RapidSSL Certificate RapidSSL DV One domainplus its www $10,000 Minutes $16.95 $69
Certum Commercial SSL Certificate Certum DV One domainplus its www €200,000 Minutes $18 $41
Comodo EssentialSSL Certificate Comodo DV One domainplus its www $10,000 Immediate $21.18 $28.24
Sectigo EssentialSSL Certificate Sectigo DV One domainplus its www $10,000 Immediate $21.18 $28.24
SSL123 SSL Certificate by Thawte Thawte DV One domainplus its www $500,000 Minutes $49 $149
GeoTrust QuickSSL Premium Certificate GeoTrust DV One domainplus its www $500,000 Minutes $69 $149
SSL Certificate for CCTV camera or IP camera or IP DVR Sectigo DV One domainplus its www $10,000 Minutes $69 $99
Comodo SSL Certificate Comodo DV One domainplus its www $250,000 Minutes $70.31 $93.74
Sectigo SSL Certificate Sectigo DV One domainplus its www $250,000 Minutes $70.31 $93.74
Certum Commercial Wildcard SSL Certificate Certum DV One domain, unlimited subdomains*.example.com and example.com €400,000 Minutes $79 $158
Comodo PositiveSSL Multi-Domain Certificate Comodo DV 3 hostnames includedup to 247 in total $10,000 Minutes $114 $165
Sectigo PositiveSSL Multi-Domain Certificate Sectigo DV 3 hostnames includedup to 247 in total $10,000 Minutes $114 $165
Comodo PositiveSSL Wildcard Certificate Comodo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Minutes $121.98 $162.64
Sectigo PositiveSSL Wildcard Certificate Sectigo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Minutes $121.98 $162.64
GeoTrust QuickSSL Premium SAN Multi-Domain GeoTrust DV 5 hostnames includedup to 4 in total $500,000 Minutes $131 $220
Comodo EssentialSSL Wildcard Certificate Comodo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Immediate $131.61 $175.48
Sectigo EssentialSSL Wildcard Certificate (sub-Domain) Sectigo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Immediate $131.61 $175.48
RapidSSL Wildcard Certificate RapidSSL DV One domain, unlimited subdomains*.example.com and example.com $10,000 Minutes $139.95 $269
Comodo UCC Multi-Domain SSL Certificate Comodo DV 3 hostnames includedup to 247 in total $25,000 Minutes $146.87 $195.82
Sectigo UCC Multi-Domain SSL Certificate Sectigo DV 3 hostnames includedup to 247 in total $25,000 Minutes $146.87 $195.82
Comodo Wildcard SSL Certificate (DV) Comodo DV One domain, unlimited subdomains*.example.com and example.com $250,000 Minutes $198 $449
Sectigo Wildcard SSL Certificate (DV) Sectigo DV One domain, unlimited subdomains*.example.com and example.com $250,000 Minutes $198 $449
GeoTrust QuickSSL Premium Wildcard GeoTrust DV One domain, unlimited subdomains*.example.com and example.com $500,000 Minutes $245 $479
Thawte SSL123 Wildcard Certificate Thawte DV One domain, unlimited subdomains*.example.com and example.com $500,000 Minutes $245 $745
PositiveSSL Multi-Domain Wildcard SSL Certificate Comodo DV Several domains, every subdomain3 names included, up to 247 $10,000 Minutes $267.24 $356.32
Sectigo PositiveSSL Multi-Domain Wildcard SSL Certificate Sectigo DV Several domains, every subdomain3 names included, up to 247 $10,000 Minutes $267.24 $356.32

Prices are for one year. Most of these can be bought for two, which is the longest term the industry rules allow to be sold — the saving is shown on the product page.

The free and trial certificates in this list

A few of the products the catalogue matches here are not ordinary certificates and are kept out of the price comparison so they do not distort it. The trial is a short evaluation certificate, and the Let’s Encrypt items are a paid setup and renewal service wrapped around a free certificate rather than a certificate we sell you. If your host issues and renews Let’s Encrypt for you, your server can reach the internet on port 80 and nobody needs your company name in the certificate, use it and keep your money — we would rather say so than sell you something you did not need.

How to choose between them

Once you are on the right page the remaining decision is small, and it comes down to three things in this order.

  1. Price, because nothing else differs

    Every certificate on this page proves the same thing to the same standard with the same cryptography. A $15 one and a $70 one negotiate identical ciphers. Unless a brand is specified for you, buy on price.

  2. Warranty, if a contract names a figure

    The warranty is what the authority pays out if it mis-issues. It almost never comes up, but insurers and enterprise contracts sometimes state a number, and it is the one specification that genuinely varies here.

  3. Brand, only when something else demands it

    Some hosting panels, appliances and procurement lists name a specific authority. If yours does, buy that one. If not, the name on the certificate is invisible to your visitors.

Questions we get asked before people order

Does it cover both acme.com and www.acme.com?

Yes. Every single-domain certificate on this page has included the www version of the name as standard for years, so ordering for the bare domain covers both. Confirm it with the free SSL checker after install, because serving the one your certificate does not carry is a warning either way.

How quickly can I have it?

Minutes, in the ordinary case. Validation is either a click on a link sent to an address at the domain, or a DNS record you add. There is no document check and no phone call at this level, which is the whole point of domain validation.

Is a $15 certificate weaker than a $200 one?

No, and anyone who tells you otherwise is selling. The encryption, key strength and browser trust are identical. What you pay above the cheapest buys vetting, warranty and a brand name — none of which is security on the wire.

Can I move up to a company-validated certificate later?

Yes, at any point. There is no migration and nothing to unpick: you order the new certificate, install it, and the old one simply expires. Nothing about a domain-validated certificate locks you in.

We are behind Cloudflare. Do we still need one?

Cloudflare covers the leg between your visitor and Cloudflare. The leg between Cloudflare and your own server needs its own certificate unless you are content with that hop unencrypted, which fails most audits. A certificate from this page on the origin is the usual answer.

What happens if I let it expire?

Visitors get a full-screen interstitial rather than a subtle warning, and search crawlers treat the site as broken. There is no grace period. Buy two years where you can and put the renewal date somewhere it will be seen.

The other ways to cover a website

Two of these answer what the certificate has to cover and three answer how much you have to prove about who you are. Every one of them is a full price list like this page.

Send us the hostname list and we will price it

A line about what the site does and which names it answers on is enough. We come back with the cheapest certificate that genuinely covers it — including when that is one certificate instead of the four you were about to buy. No obligation and no sales call.