SSL/TLS Guides & How-tos

Straight answers to the questions that come up when you buy, validate, install and manage an SSL/TLS certificate, updated for today's certificate lifetime: up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029.

Getting started with a new SSL

Getting started How to Activate Your SSL Certificate Activate your SSL certificate after purchase: enter your domain and CSR, pass domain validation and install. DV issues in minutes, OV in 1–3 days, EV in 3–5. Read guide → · 4 min Setup How to Generate a CSR (Certificate Signing Request) Generate a CSR and private key with OpenSSL, cPanel, Plesk or IIS, or free in your browser. What to enter for DV, OV and EV, and how to keep the key safe. Read guide → · 5 min Validation How Domain Control Validation (DCV) Works: DNS, HTTP & Email How SSL domain control validation works: DNS, HTTP file and email methods, CAA and DNSSEC checks, and how long a domain check can be reused under SC-081. Read guide → · 7 min Validation OV & EV Business Validation: What the CA Checks What the CA checks for OV and EV SSL: company registry records, address, a phone call, the documents you may need, and opinion letters. OV 1–3 days, EV 3–5. Read guide → · 6 min Setup How to Install an SSL Certificate: Nginx, Apache, IIS & cPanel Install your SSL certificate and CA chain on Nginx, Apache, IIS or cPanel, then verify HTTPS. Copy-ready config, the fullchain file and how to fix chain errors. Read guide → · 8 min

Manage or cancel your SSL

Managing How to Renew Your SSL Certificate When to renew your SSL certificate, how renewal differs from free reactivation now that certificates last up to 200 days, and how to renew without downtime. Read guide → · 4 min Managing How and Why to Reissue an SSL Certificate Reissue your SSL certificate free for its life: replace a lost or compromised key, change the CSR, fix domains or move servers. Reissue vs renew vs reactivate. Read guide → · 5 min Managing How SSL Plan Reactivation Works Certificates now last up to 200 days, so plans of a year or more arrive as a series of certificates. How free reactivation, the 30-day window and alerts work. Read guide → · 5 min Troubleshooting Common SSL Certificate Errors and How to Fix Them Fix common SSL errors: name mismatch, incomplete chain, expired or untrusted certificates, mixed content, and issuance blocked by CAA or DNSSEC settings. Read guide → · 7 min Billing How to Get a Refund on an SSL Certificate How the SSL money-back window works: which certificates qualify, how to request a refund with your order number, the credit note, and when a reissue is better. Read guide → · 3 min

Learn about SSL

Certificate lifetimes Why SSL Certificates Now Expire Faster: The 200-Day Rule Certificate lifetimes are capped at 200 days now and fall to 47 days by March 2029 under CA/B Forum ballot SC-081. What changes and how your plan is covered. Read guide → · 6 min Choosing a certificate DV vs OV vs EV: Which SSL Certificate Do You Need? DV, OV and EV SSL certificates compared: what the CA checks, issuance time (minutes, 1–3 days, 3–5 days), what visitors see, and how to choose the right one. Read guide → · 6 min Choosing a certificate Multi-Domain (SAN) SSL Certificates Explained How a multi-domain (SAN) SSL certificate covers several domains on one certificate, how per-domain pricing works, and when to pick SAN, wildcard or single. Read guide → · 6 min Choosing a certificate Wildcard SSL Certificates Explained A wildcard SSL certificate secures all first-level subdomains with one certificate. What it covers, DNS validation, why EV wildcards don't exist, and SAN. Read guide → · 5 min Trust signals What Is an SSL Site Seal and How to Add One What an SSL site seal shows visitors, static vs dynamic seals, which certificates include one, and how to add the seal to checkout, login pages and footer. Read guide → · 4 min Basics SSL Certificate FAQ: Plain-English Answers Plain-English SSL answers: what a certificate does, DV vs OV vs EV, issuance time, the 200-day validity limit, wildcard vs SAN, tax invoices and refunds. Read guide → · 6 min

Not sure which certificate you need? Use the certificate finder →