Ordering a Sectigo SSL Certificate
Table of Contents
DNSimple provides an SSL certificate interface you can use to order a new SSL certificate.
Starting March 15, 2026, Sectigo SSL certificates sold by DNSimple are valid for a maximum of 200 days due to CA/Browser Forum requirements. You will need to purchase a new certificate before it expires to maintain uninterrupted coverage. Sixty days before the certificate expires, you will begin receiving renewal notices.
Before You Start
To order an SSL certificate you need a DNSimple account.
Note
You are not required to keep an active subscription to access the certificate, however some features, such as certificate renewal or auto-renewal, will not be available when you unsubscribe.
You can order an SSL certificate for a domain, even if the domain is hosted elsewhere or registered with another registrar. You are not required to transfer or host a domain with us to purchase a Sectigo SSL certificate.
Please ensure you comply with all the technical requirements in our Getting Started with SSL Certificates page before ordering the certificate.
For more details about the configuration, approval, and installation of the certificate, read the Getting Started with SSL Certificates article, or follow the instructions on the site after you purchase the SSL certificate order.
If you are looking to renew an existing certificate, read Renewing a Sectigo SSL Certificate.
Ordering a Sectigo SSL Certificate
Before purchasing an SSL certificate, read the Getting Started with SSL certificates article to make sure you are familiar with the SSL certificate process.
The order is the first step in getting an SSL certificate. It will create an SSL certificate order that represents a request for a certificate to the CA.
Ordering a certificate
- If you have more than one account, select the relevant one.
- If the domain is not already in your account, follow the instructions to add a domain without transferring it.
- If the domain is already in your account, on the top-nav menu, click the tab, then the button on the upper right.
-
From the drop-down under Sectigo, locate the domain you are purchasing the certificate for. Click .

-
Configure the certificate details:
- Read this article to determine the appropriate hostname of your SSL certificate.
- Enter the certificate common name. Use an
*to order a wildcard certificate. - Select the signature algorithm. ECDSA is selected by default, but you can select RSA if your scenario requires it.
- Leave the CSR option unchecked, unless a custom CSR is needed. The easiest option is to have DNSimple automatically generate the CSR and a new private key. Make sure to read our private key policy.
-
Click if you have a subscription.

If you do not have a subscription, click .

-
Once the certificate is paid for, select the validation email from the list and click .

- Follow the steps in the validation email to complete domain validation.
Note
The certificate price will be held on your card immediately. Your card will be charged once the certificate is issued. If the issuance fails, funds will be released.
Next Steps
Once you order the certificate, you will have to install and configure the certificate.
See how to install a certificate.
Have More Questions?
If you have any questions about purchasing Sectigo certificates with DNSimple, contact us, and we’ll be happy to help.