DigiCert certificates

DigiCert Secure Site Pro SSL is the premium Secure Site line: organisation-validated TLS plus DigiCert’s Pro bundle in their console (malware and certificate-transparency style monitoring as DigiCert ships with that SKU). Crozsi sells the certificate and attaches fulfilment. We will confirm on the quote which Pro extras are active for this product code, rather than promising every marketing feature from a foreign storefront.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Secure Site Pro SSL (FLEX) combines DigiCert’s Pro product line with FLEX naming so one order can cover a mix of hostnames and wildcards. Organisation validation still applies. Console extras (monitoring tools DigiCert attaches to Pro) are confirmed on the live quote, Crozsi does not invent PQC or malware-scan promises from another country’s product page.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

Secure Site Pro EV (FLEX) combines DigiCert’s Pro EV line with FLEX naming so one order can cover several FQDNs. Organisation vetting is still full EV. Console extras are confirmed on the live quote. There is no EV wildcard.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Secure Site Pro EV SSL is the premium Secure Site EV line: extended validation plus whatever Pro extras DigiCert attaches in CertCentral (CT monitoring, malware scanning, or similar as shipped with that SKU). Crozsi sells the certificate and attaches fulfilment. We confirm live entitlements on the quote rather than copying foreign-store WAF/PQC banners. Encryption is still standard TLS; EV is identity, not a stronger lock.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Secure Site OV (FLEX) is organisation-validated Secure Site with FLEX naming: you can assign a mix of standard domains and wildcard names from one certificate instead of stacking separate SKUs. Ignore cache rows that tag this as DV/minutes, Secure Site FLEX still requires organisation checks. We confirm the name budget on the live product before you order.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

DigiCert Secure Site SSL is DigiCert’s flagship organisation-validated certificate for one hostname. You get the same OV identity check as Standard SSL, with Secure Site branding and the DigiCert Secured seal that many Indian enterprise briefs name explicitly. Encryption is 256-bit class TLS; the premium is brand, seal, and DigiCert’s Secure Site support path, not a different padlock in Chrome.

• ✓Business identity verified by CA
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Secure Site EV (FLEX) is extended-validation Secure Site with FLEX naming so you can add FQDNs within a live name budget. It does not skip EV checks and cannot cover *.example.com. Ignore cache labels that say domain validation in minutes.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Secure Site EV SSL is DigiCert’s flagship extended-validation certificate for one hostname. You get the strictest identity review plus Secure Site branding and the DigiCert Secured seal that many Indian enterprise briefs name explicitly. Encryption is standard public TLS. Current Chrome does not show a green address bar; the organisation is on the certificate and typically behind the padlock.

• ✓Highest level of identity verification
• ✓Organisation name visible in browser
• ✓Business identity verified by CA
• ✓256-bit encryption

DigiCert Secure Site Multi-Domain SSL puts several unrelated hostnames on one organisation-validated Secure Site certificate. It is for teams that want one DigiCert Secured seal and one renewal instead of a certificate per brand or app hostname. Confirm included SAN versus extras on the live quote, do not copy a foreign store’s “up to 250” as a guaranteed included count.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Secure Site Wildcard SSL is organisation-validated coverage for first-level subdomains of one base (*.example.com). It avoids a certificate per subdomain while keeping the Secure Site seal. Nested hosts (a.b.example.com) are not covered by a single-level wildcard. This is not DV even if a cache row says minutes.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

DigiCert Secure Site EV Multi-Domain SSL puts several FQDNs on one extended-validation Secure Site certificate. Confirm included SAN versus extras on the Crozsi quote, a foreign store’s “up to 250” is a maximum, not an included count. There is no EV wildcard.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Basic OV (FLEX) is organisation-validated TLS from DigiCert with FLEX licensing: you can assign names (including wildcard-style coverage where the SKU allows) without buying a separate product for every hostname pattern. It is aimed at teams that want DigiCert roots and OV identity on Indian company invoices.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

DigiCert Document Signing Individual (500) is a document-signing certificate for a named person, with a 500-signature band on this SKU. Typical use is applying an Adobe-trusted digital signature to PDFs (AATL, confirmed on the live product). It is not HTTPS, not S/MIME, and not a CCA-licensed Indian DSC for MCA/GST e-filing.

• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Basic EV (FLEX) is DigiCert’s extended-validation certificate with FLEX licensing: one order can cover several FQDNs without jumping to Secure Site EV. It is still EV, not DV, not minutes. Public CAs do not issue EV wildcards; FLEX here is extra hostnames, not *.example.com. We confirm the live name budget before you place the order.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Code Signing Certificate is organisation-validated signing for software installers and executables. It is not website TLS. DigiCert identifies the publisher; users see a verified name instead of Unknown Publisher when the file is signed and timestamped. Public-trust code-signing keys are hardware-held. Specify this SKU when the security standard names DigiCert rather than Sectigo/Comodo.

• ✓Removes 'Unknown Publisher' warning
• ✓Signs EXE, DLL, MSI, scripts & drivers
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

DigiCert Document Signing Individual (2000) is the higher individual signature-volume band: same document-signing class as the 500 SKU, more signatures on the live product. Still not website TLS, not PAC/S/MIME, and not a CCA DSC unless the portal explicitly accepts this CA.

• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Document Signing Organization (2000) puts the registered organisation on the document-signing certificate, with a 2000-signature band. Use it when PDFs must show the company, not only a person. Organisation checks apply (not minutes like DV TLS). Still not a CCA DSC by default, not S/MIME, not website SSL.

• ✓Business identity verified by CA
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert EV Code Signing Certificate is DigiCert’s extended-validation signing product for software publishers. Keys are issued to hardware. EV is the stricter identity review and the SKU teams name when they want DigiCert EV code signing (including historical SmartScreen reputation behaviour). It does not create a website padlock and does not replace Microsoft driver attestation or Apple notarization.

• ✓Removes 'Unknown Publisher' warning
• ✓Signs EXE, DLL, MSI, scripts & drivers
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

DigiCert Document Signing Organization (5000) is the higher organisation signature-volume SKU: company identity on the signing certificate, more signatures on the live product than the 2000 band. Same caveats: not HTTPS, not PAC, not an automatic CCA DSC.

• ✓Business identity verified by CA
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

A Common Mark Certificate (CMC) is DigiCert’s BIMI mark for brands that use the common-mark / checkmark-style BIMI profile instead of a registered-trademark VMC. It still needs DMARC-authenticated mail. It is not S/MIME, not PDF signing, not website SSL. Inbox support is not universal.

• ✓Business identity verified by CA
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

A Verified Mark Certificate is a BIMI credential: it lets supporting mail clients show your trademarked logo next to authenticated mail. It is not S/MIME, not document signing, and not HTTPS. You still need a working DMARC policy (and typically DKIM/SPF). Trademark evidence is part of validation.

• ✓Business identity verified by CA
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

A standard, yet popular Domain Validated (DV) certificate due to its low cost and rapid issuance process. With 99% of browser recognition and its encryption strength of 256-bit, it’s an ideal solution for protecting a single, entry-level site.

• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

RapidSSL Plan + Automate is DigiCert’s entry domain-validated certificate with full-lifecycle automation: issue, domain validation, install, and renew without a CSR email each cycle. Public certificate lifetimes are shrinking toward 47 days (eight-plus renewals a year). This SKU is the hands-off RapidSSL for a single hostname on a Linux (Apache/Nginx) or Windows (IIS) server that can run the Automate installer.

• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte SSL123 is DigiCert-family domain-validated TLS under the Thawte brand. It encrypts one public hostname with issuance in minutes after domain control, the Thawte-labelled option when a standard or historic SKU list says SSL123 rather than PositiveSSL or RapidSSL.

• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte SSL123 (FLEX) is the DV FLEX sibling of classic SSL123: one certificate can cover a mix of standard names and wildcard names under DigiCert FLEX rules. Issuance is typically minutes after domain control. It is not Thawte Web Server OV. Specify SSL123 FLEX when the bill of materials still says SSL123 and you need more than one hostname pattern.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

GeoTrust DV SSL (FLEX) is domain-validated TLS with DigiCert FLEX naming: one order can mix standard hostnames and wildcard names instead of buying a separate SAN pack and a separate wildcard. Validation stays minutes-fast after you prove control of every name. It does not put an organisation on the certificate. We confirm the live FLEX budget before you place the order.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

GeoTrust QuickSSL Premium is a trusted domain-validated certificate in the affordable DigiCert family. It is the QuickSSL teams pick when they want a GeoTrust name and site seal on a single hostname, with issuance in minutes after domain control, still without organisation paperwork.

• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

GeoTrust DV Plan + Automate is the GeoTrust-branded DigiCert-family automate for one hostname: domain-validated HTTPS with issue, install, renew, and alerting, the same operational idea as RapidSSL Plan + Automate, with GeoTrust on the certificate and typically a higher list position. Use it when the bill of materials says GeoTrust DV + automate, or when you want GeoTrust’s site seal on an automated Linux/Windows install.

• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

GeoTrust True BusinessID is organisation-validated (OV) TLS under DigiCert’s GeoTrust brand. The CA checks that a registered business controls the hostname, not only that someone can prove DNS or email. Encryption is the same 256-bit class as cheaper DV products; the extra work is identity: legal name on the certificate and a clickable CA site seal.

• ✓Business identity verified by CA
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

GeoTrust True BusinessID (FLEX) is organisation-validated TLS with DigiCert FLEX licensing: one order can cover a mix of standard hostnames and wildcard names instead of buying a separate certificate for every pattern. Treat live catalog “minutes / domain-only” labels as incomplete for this SKU, FLEX is still OV. We confirm name counts against DigiCert rules before you place the order.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

Thawte SSL Web Server is organisation-validated TLS on the Thawte brand (DigiCert family). Use it when a brief says Thawte rather than GeoTrust or DigiCert Secure Site. Encryption is standard public TLS; the extra versus DV is organisation identity on the certificate and a Thawte site seal. It can cover a small set of names (SAN). The quote lists exactly which names are included.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte SSL Web Server (Flex) is organisation-validated Thawte with DigiCert FLEX naming: mix standard names and wildcards on one order. It is not a DV instant cert. We map your hostname list to the live FLEX budget before you place the order.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

RapidSSL Wildcard covers unlimited first-level subdomains of one registered name with domain-validated DigiCert-family TLS. It is the usual low-cost wildcard when the bill of materials says RapidSSL rather than PositiveSSL or QuickSSL. Nested hosts are not covered. The Automate wildcard SKU is a different product if you need ACME-style issuance on a VPS.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

RapidSSL Wildcard Plan + Automate is DigiCert RapidSSL for unlimited first-level subdomains (*.example.com), with the same full-lifecycle automate as the single-name plan: issue, validate, install, renew, and alert. When public certs fall toward 47 days, a wildcard without automation is eight-plus manual installs per year across every host that uses that cert.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

GeoTrust QuickSSL Premium SAN is the DV multi-name sibling of QuickSSL Premium: a small SAN pack issued in minutes after you prove control of every hostname. It is not organisation-validated True BusinessID. Confirm how many extra names are included on the live SKU, foreign-store “four extra domains” is not a Crozsi guarantee until we check the product.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

GeoTrust True BusinessID with EV is extended-validation TLS under DigiCert’s GeoTrust brand. The CA performs the strictest public-trust identity review before issue. Encryption is the same 256-bit class as DV and OV; the extra is identity: a verified legal name on the certificate and a GeoTrust seal. Current Chrome does not paint a green address bar, the organisation is visible when someone opens the padlock or certificate.

• ✓Highest level of identity verification
• ✓Organisation name visible in browser
• ✓Business identity verified by CA
• ✓256-bit encryption

GeoTrust True BusinessID EV (FLEX) is extended validation with DigiCert FLEX naming: start with one hostname and consume a name budget for more FQDNs later, within live limits. FLEX does not skip EV checks and does not create an EV wildcard. Ignore cache rows that tag this as domain-only minutes.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte SSL Web Server with EV is extended-validation TLS when the purchase order says Thawte rather than GeoTrust or DigiCert Secure Site. Encryption matches other public TLS. The extra is the EV identity review and a Thawte seal. Current browsers do not restore a green URL bar; the verified company is on the certificate.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte SSL Web Server EV (Flex) is extended validation with DigiCert FLEX naming so you can bind more FQDNs later within live limits. It does not skip EV paperwork and cannot issue an EV wildcard. Treat cache “minutes / domain” labels as wrong.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte SSL123 Wildcard is the DV wildcard in the SSL123 line: unlimited first-level subdomains after domain control, typically minutes. It is not Thawte Wildcard SSL (the OV Web Server wildcard). Specify SSL123 Wildcard when the estate or BOM still uses that product name.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

GeoTrust QuickSSL Premium Wildcard is the DV wildcard sibling of QuickSSL Premium: unlimited first-level subdomains on one base after domain control, typically minutes. It does not carry organisation identity. Use True BusinessID Wildcard when the purchase order says OV.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

GeoTrust True BusinessID Multi-Domain is a SAN/UCC certificate: several fully qualified names on one organisation-validated GeoTrust file instead of a certificate per hostname. Typical Exchange-style lists (mail, autodiscover, owa, plus a public website) fit here when they are public FQDNs under one legal entity. Treat cache “DV / minutes” labels as wrong, True BusinessID is OV. “Up to 250” is a maximum, not the included SAN count.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

GeoTrust DV Wildcard Plan + Automate puts DigiCert-family GeoTrust DV on unlimited first-level subdomains and keeps the certificate installed through Automate. One missed 47-day renew on a wildcard takes down www, api, and mail together, automation is how you avoid that.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

DigiCert Standard SSL is DigiCert’s everyday organisation-validated certificate for a single public hostname. Encryption matches other public TLS; the difference versus DV is that DigiCert checks the registered organisation. It is not Secure Site and not EV. Those are separate SKUs with different seals and extra DigiCert console options.

• ✓Business identity verified by CA
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte Wildcard SSL covers first-level subdomains of one base (*.example.com) with organisation-validated Thawte TLS. It is the straightforward wildcard when you do not need a multi-domain SAN pack or FLEX mixing. Nested subdomains and unrelated bases need other SKUs.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

DigiCert Extended Validation SSL is DigiCert’s EV for a single hostname. The CA performs the strongest public-trust identity review in this catalog. You get HTTPS, a padlock, and the organisation on the certificate, not a return of Chrome’s retired green address bar.

• ✓Highest level of identity verification
• ✓Organisation name visible in browser
• ✓Business identity verified by CA
• ✓256-bit encryption

GeoTrust True BusinessID Wildcard covers unlimited first-level subdomains of one base (www, mail, api, staging under *.example.com) with organisation-validated GeoTrust TLS. It is not DV QuickSSL. Nested names such as a.b.example.com are not covered. Public CAs do not issue EV wildcards, if the brief says EV, use EV SAN or FLEX FQDNs instead.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility

GeoTrust True BusinessID with EV Multi-Domain puts several FQDNs on one extended-validation certificate. Every name still goes through EV identity checks for the same legal entity. It is the SAN pack when the brief says GeoTrust EV and you operate more than one public hostname. Confirm included SAN versus extras on the live quote, do not copy a foreign store’s “up to 250” as included.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

Thawte SSL Web Server Multi-Domain Wildcard is organisation-validated Thawte for several base domains plus first-level subdomains on one certificate. Use it when the brief says Thawte and you operate many properties under one legal entity. Confirm included SAN versus extras on the Crozsi quote, do not copy foreign-store name counts.

• ✓Multi-domain + wildcard subdomains in one cert
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

GeoTrust True BusinessID with Multi-Domain Wildcard packages organisation-validated TLS across several base domains and their first-level subdomains on one certificate. Use it when one legal entity operates many properties (brands, regions, apps) and you want a single GeoTrust seal rather than a folder of single-name certs.

• ✓Multi-domain + wildcard subdomains in one cert
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert EV Multi-Domain SSL is the Standard-line SAN EV: several unrelated hostnames on one DigiCert extended-validation order. Treat flattened “DV / minutes” cache labels as unreliable. Confirm included SAN versus extras on the live quote. Public EV cannot use wildcards.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Multi-Domain SSL is the Standard-line SAN certificate: several unrelated FQDNs on one DigiCert order instead of a certificate per hostname. On high-assurance catalogs this SKU is sold as organisation-validated, treat flattened “DV / minutes” cache labels as unreliable. We confirm validation class and included SAN versus extras on the live quote.

• ✓Covers multiple domains with one certificate
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility
• ✓DigiCert trusted root

DigiCert Wildcard SSL covers first-level subdomains of one base under DigiCert’s Standard line. High-assurance listings treat it as organisation-validated; ignore cache tags that say instant DV. Nested hosts and unrelated domains need extra names or another SKU. The DigiCert seal is included; a green address bar is not.

• ✓Secures unlimited subdomains (*.domain.com)
• ✓Instant domain validation
• ✓256-bit encryption
• ✓99.9% browser & mobile compatibility