SSL certificate for your domain, from 7.52 EUR a year

CloudHosting sells single-domain SSL certificates from 7.52 EUR a year without VAT, for Sectigo PositiveSSL, a domain-validated (DV) certificate issued within minutes of validation. That figure is the average yearly price on the longest term; shorter terms cost more per year. The price in our catalog is the full cost for the whole term you choose, paid once, not a monthly figure, so there are no hidden charges later. OV and EV certificates cost more because the certificate authority verifies your company before issuing, which takes extra work on their side. If you plan to keep the domain, a multi-year order is usually the cheaper route. If you are unsure which level you need, write to support and describe your site.

Every single-domain certificate CloudHosting sells secures both the apex domain and the www hostname, so one order covers example.com and www.example.com. Visitors see a valid connection whichever form they type, and you do not need two certificates or redirects just to avoid a browser warning. Keep in mind that this pairing applies only to www: any other subdomain, for example mail or shop, is a separate hostname and needs its own certificate, a wildcard or a multi-domain certificate. When you submit the CSR, use your main domain name and the www coverage is added automatically at issuance, with nothing extra to configure on your side.

A DV certificate from CloudHosting is usually issued within minutes, because the only check is that you control the domain, confirmed by a DNS record, a file on your web server or an email to the domain. The clock starts once validation is complete, so responding quickly to the confirmation step is what decides the speed. OV takes 1 to 3 working days: the certificate authority verifies your company details before adding them to the certificate. EV can take up to a week, since the vetting is the strictest. If a launch date depends on the certificate, order OV or EV in advance and keep your company records consistent, as mismatched details are the most common cause of delay.

CloudHosting sells all three validation levels, and the encryption is identical in each; what differs is how thoroughly the certificate authority checks who stands behind the site. DV proves control of the domain and is enough for websites, blogs, APIs and internal services. OV adds your verified company name to the certificate and takes 1 to 3 working days, a sensible balance for business sites and most online shops that take payments and store customer data. EV is the strictest vetting with the highest warranties, traditionally chosen by banks and fintech. You can start with DV from 7.52 EUR a year and move to OV or EV later, for example when online payments appear. If in doubt, describe your project to our support.

CloudHosting delivers a multi-year order as consecutive certificates, because a single public certificate is now valid for up to 199 days under CA/B Forum rules, so a 3-year term cannot be one long file. When each interval approaches, you reissue the certificate in the client panel, which shows how many days remain, and every reissue inside your paid term is free. You only pay again when the whole term ends and you renew for a new period. If you install our free chssl agent on your server, it requests each reissue, installs it and reloads the web server automatically, so the interval needs no manual step at all.

CloudHosting offers two ways to automate renewal, and both work today. The free chssl agent is for certificates bought on this page: install it on a Linux server with nginx, Apache or Docker, turn on auto-renewal in the client panel, and it requests every reissue within your paid term, installs it, checks the configuration and reloads the web server, rolling back if anything fails. Your TLS private key never leaves the server. The paid ACME subscription is the other way: your own ACME client, such as certbot or acme.sh, requests and renews certificates under the standard RFC 8555 protocol, which suits DevOps pipelines and containers. If you are unsure which one fits your setup, ask our support.

CloudHosting paid certificates encrypt traffic exactly as free ones do; the difference lies in the checks, the warranty and the service. A paid certificate carries a warranty from the certificate authority, up to 1,750,000 USD on the top lines, can be OV or EV with your verified company details inside, and runs for a term of 1 to 5 years with free reissues. Free certificates are DV only, carry no warranty and must be renewed every few months, so without automation a site easily ends up with an expired certificate. For an automated pipeline, look at our ACME subscription. For a business site where trust and company details matter, choose OV or EV.

Warranties on the certificates CloudHosting sells range from 10,000 USD on budget DV lines to 1,750,000 USD on the top OV and EV certificates, as shown on each card. The warranty is insurance from the certificate authority: if the CA mis-issues a certificate and a relying party, for example a customer of the site, suffers a loss because of that mistake, the CA covers the damage up to the stated amount. It does not insure you against your own server being hacked or your site failing, it only covers CA error, which is rare in practice. That is why the amount is best read as a signal of how strict the vetting is, and why OV and EV certificates carry the larger figures.

A single-domain certificate from CloudHosting covers only the apex and www, so for more names our catalog has two other certificate types. A multi-domain SAN certificate secures up to 250 hostnames on different domains in one certificate, which is convenient when you run a few sites or services under separate names. A wildcard certificate covers unlimited subdomains of one domain, so shop, mail and any future subdomain are protected without new orders. We also sell ACME subscriptions, where software requests and renews certificates on its own. Which one is cheaper depends on how many names you have and how often they change, so if the choice is not obvious, send support your list of hostnames.

Every certificate CloudHosting sells chains to a root that all mainstream browsers and operating systems trust, on desktop and mobile alike: Sectigo roots since 2002 and DigiCert roots since 2007. They are present in effectively every device your visitors use, so they see the padlock rather than a warning. The realistic caveat is installation, not trust: if the intermediate part of the bundle is missing on your server, some clients will still complain even though the certificate itself is fine. Install the full delivered bundle, and if a visitor reports a warning, contact our support and we will help you check the chain.

CloudHosting installs the issued certificate for you when the site runs on our hosting, so there is nothing to configure on your side. If the certificate is for your own server, you receive the full bundle after issuance and install it yourself, and our support guides you through the steps for your web server on working days from 9:00 to 17:00 Riga time. If you do not want to create a CSR yourself, we can generate one during the order. On a Linux server the free chssl agent can then take over every later reissue. In all cases we remind you before renewal, so the certificate does not quietly lapse and take HTTPS down with it.