Do You Support Elliptic Curve (ECC) SSL Certificates?
Last updated
All DNSimple SSL certificates are issued with ECDSA keys using the prime256v1 curve by default. ECDSA keys are smaller and faster than RSA keys at equivalent security levels.
Supported Key Algorithms
| Algorithm | Curve / Size | Default | Available for | Notes |
|---|---|---|---|---|
| ECDSA | prime256v1 |
Yes | All products | Default for all certificate products |
| ECDSA | secp384r1 |
No | Sectigo only | Requires a custom CSR |
| RSA | 2048 bits (2048 or more with a custom CSR) | No | All products | Selectable when ordering |
All certificate products, Sectigo and Let’s Encrypt, support both ECDSA and RSA when you order. Sectigo certificates also accept custom CSRs for additional flexibility, such as using the secp384r1 curve or providing your own key pair.
Switching to RSA
If your platform or integration requires an RSA key, choose it when ordering or renewing: under for Sectigo, or RSA under for Let’s Encrypt.
For Sectigo certificates, you can also provide a custom CSR with an RSA key if you need to use your own key pair.
See How to Switch From an ECC-Signed Certificate to RSA for step-by-step instructions.
Have more questions?
If you have any questions about key algorithms, contact support, and we’ll be happy to help.