Search... ⌘ K
Get Started Contact Sales

SSL Certificates

Last updated

Table of Contents

TLS (Transport Layer Security) and its predecessor, SSL (Secure Sockets Layer), are security protocols designed to secure the communication between a server and a client, for example, a web server and a browser. Both protocols are frequently referred to as SSL. For a closer look at how this encryption process works, see How HTTPS Works.

An SSL certificate (technically a TLS certificate) is required to enable SSL/TLS on your site and serve your website using the secure HTTPS protocol.

DNSimple offers different types of domain-validated SSL certificates signed by globally recognized certificate authorities.

Getting started with SSL certificates

Are you buying an SSL certificate for the first time? Getting Started with SSL Certificates guides you through the entire process. You can also read the SSL Certificate Lifecycle article to understand how each stage, from ordering to renewal, fits together.

SSL Certificate Products

There are several types of SSL certificates. They are generally classified by validation type or secured domains. If you are not familiar with the differences, take a look at the SSL Certificate Types article.

DNSimple provides the following certificate products:

  1. Sectigo Single-name SSL certificate
  2. Sectigo Wildcard SSL certificate
  3. Let’s Encrypt SSL certificate
  4. Let’s Encrypt Wildcard SSL certificate

Note

All certificates are domain-validated. We do not provide organization-validated (OV) or extended-validation (EV) SSL certificates.

For a side-by-side comparison of features, validation methods, and pricing, see Sectigo vs Let’s Encrypt SSL Certificates or the SSL Certificate Product Specifications.

Sectigo Single-Name SSL Certificates

The single-name certificate is a single-name, domain-validated certificate. It covers one host, and also the root domain when the host is www.

The certificate is issued by Sectigo and it costs $20 per year. The product name is Sectigo PositiveSSL certificate. You can buy it whether or not your domain resolves with DNSimple, and you do not need a subscription. See How to Buy a Sectigo SSL Certificate.

Sectigo Wildcard SSL Certificates

The wildcard SSL certificate is a wildcard-name, domain-validated certificate. It covers all single-level subdomains, as well as the root domain.

The certificate is issued by Sectigo and it costs $100 per year. The product name is Sectigo PositiveSSL Wildcard certificate. See How to Buy a Wildcard SSL Certificate.

Note

Sectigo certificates issued since March 15, 2026 are valid for a maximum of 200 days, due to CA/Browser Forum requirements. The maximum drops to 100 days in March 2027. Buy a new certificate or renew before it expires to keep uninterrupted coverage. See SSL Certificate Validity Changes (2026 - 2029) for the timeline.

Let’s Encrypt SAN SSL Certificates

The Let’s Encrypt certificate is a multi-name (Subject Alternative Name, or SAN), domain-validated certificate. It covers all the hostnames specified in the certificate.

The certificate is issued by Let’s Encrypt, is valid for 90 days, and is free. It requires a DNSimple subscription, and the domain must be delegated to and resolve exclusively with DNSimple. DNSimple can renew it automatically. To decide whether it fits your setup, see Let’s Encrypt: Free SSL Certificates with DNSimple.

Note

The ability to customize the names associated with a Let’s Encrypt certificate depends on the plan you are subscribed to. Check the plans and pricing page to view all your options.

Let’s Encrypt Wildcard SSL Certificates

The Let’s Encrypt wildcard SSL certificate is a wildcard-name, domain-validated certificate. It covers all single-level subdomains of a domain name. It does not cover the root domain.

The certificate is issued by Let’s Encrypt and is free, with the same requirements as the Let’s Encrypt SAN certificate. See How to Get a Free Let’s Encrypt SSL Certificate.

Note

Let’s Encrypt wildcard SSL certificates are only available on certain plans. Check the plans and pricing page to view all your options.

Manage SSL Certificates

You can purchase and manage SSL certificates from the domain’s tab.

If the domain is not in your DNSimple account because you just joined DNSimple or because it is registered elsewhere, add the domain to your account and follow the same procedure.

To Go to the SSL Certificates Tab
  1. Log into DNSimple with your user credentials.
  2. If you have more than one account, select the relevant one.
  3. On the header menu, click the tab, locate the relevant domain, and click on the name to access the domain page.

  4. Select the tab.

    A domain's SSL Certificates tab with a New certificate button and a list of certificates

From the tab you can purchase a new SSL certificate, renew an existing SSL certificate, or open a certificate to install it.

SSL Certificate Frequently Asked Questions

The SSL Certificates Frequently Asked Questions page contains the most common questions about DNSimple SSL certificates.

Have more questions?

If you have any questions or need assistance, contact support, and we will be happy to help. You can also read more about DNSimple Enterprise.