SSL Certificate FAQ

Table of Contents


Prices and Subscription

  1. What is the price of an SSL certificate?

    The price depends on the certificate type. To learn more visit the SSL Certificates article.

  2. I want to purchase an SSL certificate. What is the DNSimple subscription?

    DNSimple is a subscription-based service. You need an active subscription in our to use our platform and domain services.

    The subscription gives you access to the included platform services (such as the API access and the DNS hosting), and the paid products (such as the domain registration, SSL certificates, email forwarding, etc.).

  3. I want to purchase an SSL certificate. Do I need a subscription?

    Yes. As explained in the previous question, SSL certificates are one of our paid products, provided as part of our subscription service.

    In order to purchase an SSL certificate you need an active subscription at the time of the purchase. You are not required to have an active subscription to use or install the certificate on your domain/server, however please note that if you disable the subscription you will not receive any additional service for the domain or the certificate.

    You will also need a valid, active subscription when you renew the certificate, or if you want to reissue the certificate.

  4. I just want to purchase an SSL certificate, why do I need a subscription?

    As explained in the previous questions, we offer SSL certificate purchases as part of our subscription service.

    An SSL certificate is not a single-time purchase. You need to renew the certificate periodically, sometimes you need to rekey it or you find yourself having issues installing it, and you want to ask for some help. All these tasks are covered by our subscription service.

    Additionally, if you are requesting a Let’s Encrypt certificate, we will use our DNS hosting service to automatically provision the DNS records required to validate your certificate, and we will automatically renew the certificate for you before it expires. All these services require a subscription.

Domains and SSL certificates

  1. Do I need to transfer the domain to DNSimple to purchase an SSL certificate?

    No. You can purchase an SSL certificate for a domain that is not registered with us, without transferring it to us. However you will need to add the domain to your account in order to be able to request the certificate. You also need a valid, active subscription.

    Just follow the general instruction explained in the Getting Started guide. When you are asked to add the domain to purchase the certificate, select the option to add a domain without transferring or registering it.

  2. Do I need to host the domain with DNSimple to purchase an SSL certificate?

    Not for Standard certificates. You can purchase an SSL certificate for a domain that is not hosted with us. However you will need to add the domain to your account in order to be able to request the certificate. You also need a valid, active subscription.

    Just follow the general instruction explained in the Getting Started guide. When you are asked to add the domain to purchase the certificate, select the option to add a domain without transferring or registering it.

    If you are getting a free Let’s Encrypt certificate you will need to have the domain hosted with us in order for us to set up the required records for domain-based validation.

  3. How do CAA records affect purchasing SSL certificates?

    If you have CAA Records already set up, or you wish to use them, you will need to make sure to add the appropriate record for Comodo or Let’s Encrypt before you purchase the SSL certificate. Please see this support document for more details.

Certificate Types

  1. What type of SSL certificates does DNSimple provide?

    We provide different types of domain-validated SSL certificates, signed by globally recognized certificate authorities. We don’t provide organization-validated (OV) or extended-validation (EV) SSL certificates.

    To learn more visit the SSL Certificates article.

  2. What certificates show the company name in the green bar near the padlock?

    The green bar in the browser is displayed only if you purchase an extended-validation (EV) certificate. We currently do not sell EV certificates.

    We currently only sell DV certificates. These are less expensive than EV certificates and offer the same cryptographic level of security. If you still need/want to purchase an EV certificate, we provide some recommendation at this page.

Certificate Procedures

  1. How long does it take to issue an SSL certificate?

    In general, issuing a new SSL certificate can take from a few minutes to a few hours. However, the time frame depends on many factors.

  2. Does renewing a certificate update the one I have installed?

    No. After renewing or purchasing a new certificate you will need to install the updated files on your server(s). It is possible to automate this using webhooks and our api but we do not have access to your systems to update your certificates for you.