Multi-Domain SSL Certificates (SAN/UCC)

A SAN SSL certificate (Subject Alternative Names) covers multiple domains and subdomains with a single certificate. Ideal for Exchange Server, Microsoft 365 hybrid, and organisations with many domains.

What is SAN SSL?

SAN certificates can include up to 250 unique domain names:

✓ www.company.com
✓ mail.company.com
✓ outlook.company.com
✓ company.dk
✓ company.se
✓ login.company.com
✓ ... and many more

Unlike Wildcard certificates, SAN certificates can cover completely different domains (e.g. company.com and company.dk).

Typical use cases

Exchange Server

Exchange requires up to 3–5 domain names to function correctly:

mail.company.com
autodiscover.company.com
outlook.company.com
company.com

A SAN certificate is the standard solution for Exchange.

Microsoft 365 Hybrid

Hybrid Exchange setups require certificates with specific SAN names. FairSSL can help you identify the correct names.

Multi-site hosting

Hosting websites for multiple customers on one server? A SAN certificate can cover them all.

SAN vs. Wildcard

	SAN	Wildcard
Covers	Up to 250 specific names	All subdomains (one level)
Different domains	✓	✗
Price	Base price + per extra name	Fixed price
Exchange Server	Ideal	Possible
Validation	DV, OV or EV	DV or OV

SAN products

DV Multi-domain

Thawte SSL123 SAN DV

DV multi-domain. Supports SAN names and wildcards in combination.

from €86 /year See details →

Sectigo PositiveSSL SAN

Multi-domain DV. Up to 250 SAN names.

from €153 €77 /year See details →

OV Multi-domain

DigiCert Basic OV SAN

DigiCert OV multi-domain. Organisation name in certificate.

from €254 /year See details →

GlobalSign Organisation SAN

GlobalSign OV multi-domain. Local validation via FairSSL.

from €254 /year See details →

Thawte Web Server

Thawte OV with automatic pre-validation. Issue instantly after approval.

from €160 /year See details →

See all products with prices →

Frequently asked questions about Multi-Domain SSL

Find answers to the most common questions about SSL certificates and FairSSL.

Which extra names (SAN) are free?

When you order any SSL certificate via the website, we automatically add the base name for free: if the common name is www.example.com, example.com is added, and if it is *.example.com, the base domain example.com is added. On certificates from the DigiCert family (RapidSSL, Thawte, GeoTrust, DigiCert) this also applies when the www or wildcard name is added as a SAN, and names the wildcard covers, such as www.example.com or shop.example.com, can be added as free SANs. Names on a different level than the wildcard, or on a different domain, are charged as regular SAN names. With ACME there is no automatic addition, you list all names yourself, but the base name is still free when you include it.

Can I add more domains to a SAN certificate after issuance?

Yes, but it requires a reissue of the certificate with the new names. Reissues are free at FairSSL.

Do SAN certificates work with Exchange Server 2016/2019?

Yes. SAN is the recommended certificate type for Exchange.

What is the price per extra SAN name?

It varies by product. The base price typically covers 3–5 domains. See the product’s current price for extra names.

Secure all your domains with one certificate

Create a free account and order your first certificate. A DV certificate is issued in under 2 minutes.

Create free account Compare certificates

SSL Automation

The lifetime is 199 days now and 99 days from 24 February 2027. The automation issues and renews the certificate on its own, with one CNAME delegation per domain and no DNS keys on the server.

See SSL Automation →