SSL certificates can be valid for at most 199 days. By 15 March 2027 the limit becomes 99 days, for DigiCert certificates from 24 February 2027. Read more →

SSL Certificates

SSL certificate Cheap SSL DV SSL Wildcard SSL Multi-Domain (SAN) OV & EV SSL

Specialty Certificates

Code Signing Document Signing Email / S/MIME VMC / BIMI
View all products
In effect now Certificate Lifetime

Automation

Overview AutoDNS FairSSL vs Let's Encrypt

Platforms

Windows Setup Linux & Kubernetes Appliances ACME Clients

Tools

SSL Scanner Certificate Decoder CAA Generator

Guides

Windows Server Linux & Open Source All guides

Company

About Us Contact Installation Service
News

Language

Dansk Svenska English

Currency

Login Create Account

SSL Certificates

SSL Certificates

Complete product catalogue with certificates from DigiCert, GlobalSign and Sectigo.

Not sure which type you need? Compare SSL certificates

53 products found

RapidSSL

RapidSSL

DV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Single domain

RapidSSL "powered by DigiCert", high recognition, supports AutoDNS, single-name certificate.

Certificate €46
from €46 /year
Buy
AlphaSSL

AlphaSSL - NEW ROOT 2024

DV 199d max
Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-Sign
Single domain

AlphaSSL Single Name Certificate, affordable with Enhanced Security (Reduced Compatibility)

Certificate €53
from €53 /year
Buy
Sectigo

Sectigo PositiveSSL

DV 199d max
Windows Root Store The root is included from 2010 Microsoft's root store. It updates automatically on every supported Windows version.Apple Root Store The root is included from 2010 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots.Android Root Store The root is included from 2010 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots.Linux Root Store The root is included from 2010 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates.Java Root Store The root is included from 2010 The Java cacerts file. It follows the Java update installed on the server.10of 10No Cross-Sign needed
Single domain

Simple SSL certificate with flexible automated validation methods

Certificate €22
from €44 €22 /year
Buy
Sectigo

Sectigo PositiveSSL SAN

DV 199d max
Windows Root Store The root is included from 2010 Microsoft's root store. It updates automatically on every supported Windows version.Apple Root Store The root is included from 2010 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots.Android Root Store The root is included from 2010 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots.Linux Root Store The root is included from 2010 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates.Java Root Store The root is included from 2010 The Java cacerts file. It follows the Java update installed on the server.10of 10No Cross-Sign needed
Multi-domain (SAN)

E-mail, URL or DNS validation for multiple DNS domains on this multi SAN certificate, that includes 3 DNS names in the b

Certificate €77
+2 free names –
Extra name €39
from €153 €77 /year
Buy
Sectigo

Sectigo PositiveSSL WC

DV 199d max
Windows Root Store The root is included from 2023 With 1 Cross-Sign the root is included from 2010 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2010 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.1of 10Requires 1 Cross-Sign
Single domain

Simple SSL wildcard certificate with flexible automated validation methods

Certificate €74
from €147 €74 /year
Buy
Thawte

Thawte SSL123 SAN DV

DV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Domain validated SAN SSL certificate from Thawte.

Certificate €86
Extra name €47
from €86 /year
Buy
Thawte

Thawte SSL123 Wildcard

DV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Wildcard

Recommended domain validated wildcard SSL certificate from Thawte.

Certificate €147
Extra name €47
from €228 €147 /year
Buy
RapidSSL

RapidSSL Wildcard

DV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Wildcard

RapidSSL "powered by DigiCert", high recognition, supports AutoDNS.

Certificate €174
from €174 /year
Buy
AlphaSSL

AlphaSSL Wildcard - NEW ROOT 2024

DV 199d max
Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-Sign
Wildcard

AlphaSSL Single Wildcard Certificate, affordable with Enhanced Security (Reduced Compatibility)

Certificate €160
from €160 /year
Buy
GeoTrust

GeoTrust DV Wildcard

DV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Wildcard

GeoTrust DV SSL Flex wildcard certificate powered by DigiCert

Certificate €522
Extra name €86
from €522 /year
Buy
Sectigo

Sectigo PositiveSSL EV

EV 199d max
Windows Root Store The root is included from 2023 With 1 Cross-Sign the root is included from 2010 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2010 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.1of 10Requires 1 Cross-Sign
Single domain

Cheap EV SSL certificate with flexible automated validation methods

Certificate €121
from €161 €121 /year
Buy
GlobalSign

GlobalSign CodeSign

OV 460d max
Code signing

USB Crypto dongle or HSM-based OV Code Signing certificate for signing applications, drivers and applets.

Certificate €375
from €375 /year
Buy
GlobalSign

GlobalSign CodeSign EV

EV 460d max
Code signing

USB Crypto dongle or HSM based EV Code Signing certificate for signing applications, drivers and applets.

Certificate €442
from €442 /year
Buy
Sectigo

Sectigo EssentialSSL

DV 199d max
Windows Root Store The root is included from 2023 With 1 Cross-Sign the root is included from 2010 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2010 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.1of 10Requires 1 Cross-Sign
Single domain

Cheap simple domain approved SSL certificate.

Certificate €30
from €60 €30 /year
Buy
Sectigo

Sectigo EssentialSSL Wildcard

DV 199d max
Windows Root Store The root is included from 2023 With 1 Cross-Sign the root is included from 2010 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2010 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.1of 10Requires 1 Cross-Sign
Wildcard

Simple domain approved Wildcard SSL Certificate.

Certificate €110
from €220 €110 /year
Buy
Sectigo

Sectigo InstantSSL

OV 199d max
Windows Root Store The root is included from 2023 With 1 Cross-Sign the root is included from 2010 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2010 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2010 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.1of 10Requires 1 Cross-Sign
Single domain

Cheap company authorized SSL certificate that can be issued quickly.

Certificate €79
from €105 €79 /year
Buy
Thawte

Thawte Web Server

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Single domain

Organization validated SSL certificate from Thawte, with Wildcard SAN support.

Certificate €160
Extra name €113
from €160 /year
Buy
Thawte

Thawte SSL Wildcard

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Wildcard

Company validated wildcard SSL certificate from Thawte.

Certificate €401
Extra name €113
from €401 /year
Buy
GeoTrust

GeoTrust True Business ID SAN

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Recommended company validated SSL

Certificate €261
Extra name €133
from €261 /year
Buy
Thawte

Thawte Web Server EV

EV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Single domain

Extended Validation: the company name is validated and shown in the certificate details.

Certificate €210
Extra name €155
from €210 /year
Buy
GeoTrust

GeoTrust DV SSL

DV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Single domain

GeoTrust DV SSL Flex certificate powered by DigiCert

Certificate €107
Extra name €86
from €107 /year
Buy
GeoTrust

GeoTrust True BusinessID Wildcard

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Wildcard

Organization Validated wildcard SSL certificate.

Certificate €401
Extra name €133
from €401 /year
Buy
GeoTrust

GeoTrust True BusinessID EV

EV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Single domain

Recommended SSL certificate with Extended Validation (EV), where the company name is validated and shown in the certific

Certificate €220
from €220 /year
Buy
GeoTrust

GeoTrust TBID EV MD

EV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Single domain

Popular Extended Organization SAN SSL with 4 free SAN names.

Certificate €415
+4 free names –
Extra name €153
from €415 /year
Buy
DigiCert

DigiCert Basic OV SAN

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Business validated SAN SSL certificate, with reusable validation.

Certificate €254
Extra name €167
from €254 /year
Buy
DigiCert

DigiCert Basic OV Wildcard

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Wildcard

Business validated Wildcard SAN SSL certificate, with reusable validation.

Certificate €723
Extra name €167
from €723 /year
Buy
DigiCert

DigiCert Basic EV SAN

EV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Extended business validated SAN SSL certificate, with reusable validation.

Certificate €388
Extra name €167
from €388 /year
Buy
DigiCert

DigiCert Secure Site OV SAN

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Business validated premium SAN SSL certificate, with reusable validation.

Certificate €422
Extra name €321
from €422 /year
Buy
DigiCert

DigiCert Secure Site OV Wildcard SAN

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Business validated premium Wildcard SAN SSL certificate, with reusable validation.

Certificate €1,976
Extra name €321
from €1,976 /year
Buy
DigiCert

DigiCert Secure Site EV SAN

EV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Extended premium EV SAN SSL certificate, with malware scanning and priority validation.

Certificate €1,005
Extra name €904
from €1,005 /year
Buy
DigiCert

DigiCert Secure Site Pro OV

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Single domain

Business validated top of the line SAN SSL product, with all features possible with DigiCert.

Certificate €1,032
Extra name €1,032
from €1,032 /year
Buy
DigiCert

DigiCert Secure Site Pro OV Wildcard SAN

OV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Business validated top of the line Wildcard SAN SSL product, with all features possible with DigiCert.

Certificate €4,021
Extra name €1,032
from €4,021 /year
Buy
DigiCert

DigiCert Secure Site Pro EV SAN

EV 199d max AutoDNS
Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Extended validation top of the line SAN SSL product, with all features possible with DigiCert.

Certificate €1,501
Extra name €1,501
from €1,501 /year
Buy
DigiCert

DigiCert Secure Email for Individual

DV
Email (S/MIME)

E-mail only

1 year2 year
Certificate €66 €127
+2 free names ––
from €66 /year
Buy
DigiCert

Secure Email for Business

OV
Email (S/MIME)

Company S/MIME certificate with optional employee name

1 year2 year
Certificate €127 €234
+3 free names ––
from €127 /year
Buy
DigiCert

DigiCert CodeSign OV

OV 460d max
Code signing

USB Crypto dongle or HSM-based OV Code Signing certificate for signing applications, drivers and applets.

Certificate €374
from €475 €374 /year
Buy
DigiCert

DigiCert CodeSign EV

EV 460d max
Code signing

USB Crypto dongle or HSM-based EV Code Signing certificate for signing applications, drivers and applets.

Certificate €440
from €700 €440 /year
Buy
GlobalSign

GlobalSign Domain SAN

DV 199d max
Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-Sign
Multi-domain (SAN)

SBS/Exchange SSL certificate with multiple SAN subdomains for Exchange, Lync and Skype for Business.

Certificate €160
Extra name €53
from €160 /year
Buy
GlobalSign

GlobalSign DV SAN Wildcard

DV 199d max
Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Most Flexible Domain Wildcard SAN SSL that increases wildcard compatibility.

Certificate €348
Extra name €53
from €600 €348 /year
Buy
GlobalSign

GlobalSign Organisation SAN

OV 199d max
Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Easy organization validated SAN certificate with UC compatibility.

Certificate €254
Extra name €120
from €254 /year
Buy
GlobalSign

GlobalSign Extended SAN SSL

EV 199d max
Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Extended Validation: the company name is validated and shown in the certificate details.

Certificate €495
Extra name €143
from €495 /year
Buy
GlobalSign

GlobalSign PersonalSign1

DV
Email (S/MIME)

E-mail signature to private encryption and signing.

Certificate €53
from €53 /year
Buy

GlobalSign Qualified Signature

DV
Qualified

Qualified Electronic Signature on USB a QSCD hardware device

1 year2 year3 year
Certificate €536 €750 €871
from €536 /year
Buy

GlobalSign Qualified Seal

DV
Qualified

Qualified Electronic Seal on USB a QSCD hardware device

1 year2 year3 year
Certificate €1,159 €1,675 €1,983
from €1,159 /year
Buy
GlobalSign

GlobalSign OV SAN Wildcard

OV 199d max
Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-Sign
Multi-domain (SAN)

Easy company validated Wildcard Certificate, with the possibility of SAN names.

Certificate €717
Extra name €120
from €717 /year
Buy
GlobalSign

GlobalSign Document Sign

DV
Document signing

USB Crypto dongle based AATL approved PDF/Document signing certificate

1 year2 year3 year
Certificate €329 €589 €769
from €329 /year
Buy
DigiCert

DigiCert Document Sign Individual 500

OV
Document signing

DigiCert Document Sign Individual 500

1 year2 year3 year
Certificate €465 €745 €949
from €465 /year
Buy
DigiCert

DigiCert Document Sign Individual 2000

OV
Document signing

DigiCert Document Sign Individual 2000

1 year2 year3 year
Certificate €651 €1,070 €1,410
from €651 /year
Buy
DigiCert

DigiCert Document Sign Organization 2000

OV
Document signing

DigiCert Document Sign Organization 2000

1 year2 year3 year
Certificate €651 €1,070 €1,410
from €651 /year
Buy
DigiCert

DigiCert Document Sign Organization 5000

OV
Document signing

DigiCert Document Sign Organization 5000

1 year2 year3 year
Certificate €945 €1,600 €2,110
from €945 /year
Buy
Sectigo

Sectigo HackerGuardian PCI

DV 199d max
Single domain

PCI ASV approved online vulnerability assessment

1 year2 year3 year
Certificate €100 €180 €271
from €133 €100 /year
Buy
DigiCert

Common Mark Certificate

OV 199d max AutoDNS
Single domain

Enables showing your company logo next to the senders field in participating clients such as Google Mail.

1 year2 year3 year
Certificate €1,105 €2,211 €3,311
Extra name €1,105€1,105€1,105
from €1,105 /year
Buy
DigiCert

Verified Mark Certificate

EV 199d max AutoDNS
Single domain

Enables showing your trademarked logo next to the senders field in participating clients such as Google Mail.

1 year2 year3 year
Certificate €1,501 €3,002 €4,503
Extra name €1,501€1,501€1,501
from €1,501 /year
Buy

Ready to create a free account?

Create a free account and order your first certificate. A DV certificate is issued in under 2 minutes.

Create free account Compare certificates