SSL certificates
Choose a SSL certificate for your website
An SSL certificate is a digital certificate that encrypts the connection between a visitor and your site and confirms who is behind the domain. It is chosen on two things: how many domains it covers (one domain, Wildcard or Multi-domain) and how thoroughly the owner is verified (DV, OV or EV validation).
- DV · OV · EV
- Wildcard and Multi-domain
- Issued in minutes
- We install it for you
from 25 EUR / year
Basics
What an SSL certificate is, and why a site needs one
An SSL certificate is a digital document a certificate authority issues for one specific domain. It establishes an encrypted connection (HTTPS) between a visitor's browser and the server, so nothing on the way can be read or changed — passwords, contact-form messages, payment details.
Without a certificate, Chrome and Firefox mark the address as “Not secure”, and password fields are flagged as risky on top of that. Google has used HTTPS as a ranking signal since 2014, so a certificate is a search-visibility question as well as a security one.
Encryption is identical on every certificate — the cheapest and the most expensive one. What actually differs is two things: how thoroughly the owner is verified and how many domains the certificate covers.
A certificate is only one part of trust — visitors increasingly check for themselves whether a site is genuine, especially before buying anything. Our own SSL checker shows exactly what a visitor's browser sees when it connects to a site.
Verification level
DV, OV and EV — three levels of validation
All three give the same encryption. What differs is how much the certificate authority checks before issuing it, and what ends up written into the certificate itself.
DV
Domain Validation
The certificate authority checks exactly one thing: that you really control the domain. Confirmation happens automatically, by e-mail or a DNS record — no documents needed.
- Verifies
- Control of the domain
- Issued in
- A few minutes
- Certificate shows
- The domain only
- Good for
- Sites, blogs, brochures
OV
Organization Validation
Alongside the domain, the certificate authority checks that the company genuinely exists — through a business registry and a phone call. The company name is written into the certificate and visible on clicking the padlock.
- Verifies
- Domain + company
- Issued in
- 1–3 business days
- Certificate shows
- Company name and city
- Good for
- Sites with logins
EV
Extended Validation
The strictest check of a legal entity, under one shared protocol every certificate authority follows. Carries the highest warranties. The green address bar no longer exists — browsers removed it in 2019 — but the company's verified details still sit inside the certificate.
- Verifies
- Full company check
- Issued in
- Up to 10 days
- Certificate shows
- Full legal identity
- Good for
- Shops, payments
Number of domains
One domain, Wildcard, or Multi-domain
A certificate covers exactly what it names — a single-domain certificate will not cover a subdomain, not even www if it isn't listed. This is the most common purchase mistake.
Single domain
The most common choice. Covers the domain with and without www — and nothing else. Add a subdomain later, and it needs its own certificate.
Wildcard
Issued as *.yoursite.rs and covers an unlimited number of subdomains at that level — blog, mail, shop, webmail, however many you create, even after issuance.
Multi-domain (SAN)
One certificate for several different domains. Useful when a company runs a few sites, or one mail server handles several domains.
Green box = covered by the certificate. Grey below the box = not covered — the browser would show an error. Wildcard covers every subdomain of one domain; Multi-domain covers several different domains, but not their subdomains.
The offer
SkyHosting SSL offer
Ten certificates from RapidSSL, GeoTrust and Comodo, grouped by validation type. All prices in EUR, per year.
We do not currently stock a certificate for that combination — tell us what you need and we will source it.
DV — Domain Validation
The certificate authority only checks that you control the domain. Issued in minutes, no paperwork. Encryption is identical to OV and EV - what differs is how much is verified about you.
RapidSSL
RapidSSL
per year
- Covers the domain with and without www
- 256-bit encryption
- Unlimited reissues
- Trusted by 99%+ of browsers
Comodo
Comodo EssentialSSL
per year
- Covers the domain with and without www
- Free Comodo site seal
- Unlimited server licences
- No paperwork required
GeoTrust
GeoTrust QuickSSL Premium
per year
- Dynamic GeoTrust site seal
- 256-bit encryption, 2048-bit root
- Unlimited server licences
- The largest warranty among DV certificates
RapidSSL
RapidSSL Wildcard
per year
- Unlimited subdomains
- Issued as *.yoursite.rs
- 256-bit encryption
- Unlimited reissues
Comodo
Comodo EssentialSSL Wildcard
per year
- Unlimited subdomains
- Unlimited server licences
- Free site seal
- No paperwork required
Comodo
Comodo Positive Multi-Domain SSL
per year · covers 3 domains
+ 26 EUR per additional domain, up to 1000 in total
- Main domain plus 2 more included
- 128/256-bit encryption, 2048-bit root
- One renewal instead of several
- Unlimited reissues and server licences
OV — Organization Validation
The company is verified and its name is written into the certificate, so a visitor who inspects it sees who really runs the site. Issued in a day or two.
Comodo
Comodo InstantSSL Certificate
per year
- Company name written into the certificate
- Dynamic Comodo Secure Seal
- Unlimited reissues
- Unlimited server licences
GeoTrust
GeoTrust True BusinessID Wildcard
per year
- Company name written into the certificate
- Unlimited subdomains
- Dynamic True Site Seal
- Unlimited server licences
EV — Extended Validation
The strictest check: full legal identity of the company goes into the certificate and is visible on clicking the padlock. Used where trust carries money - banking, shops, portals.
Comodo
Comodo EV SSL
per year
- Full legal identity in the certificate
- The largest warranty we offer
- Dynamic Comodo TrustLogo
- Unlimited server licences
GeoTrust
GeoTrust True BusinessID with EV
per year
- Full legal identity in the certificate
- Dynamic True Site Seal
- 256-bit encryption, 2048-bit root
- Protects the brand against phishing
Not sure which certificate fits? Ask us — tell us what you need covered and we will point at one.
The certificates we issue are signed by recognised certificate authorities
Process
From order to padlock
We handle issuance and installation end to end — this is just so you know what happens, and how long it takes.
Validation is the only step whose length depends on the certificate type — everything else takes the same time.
-
CSR request
The server generates a key pair and a CSR — a request naming the domain and the owner's details. Doing it yourself? Use our CSR generator.
a few minutes -
Validation
The certificate authority verifies control of the domain, and for OV and EV also checks the company. This is the only step whose length depends on the certificate type.
DV: minutes · OV: 1–3 days · EV: up to 10 days -
Issuance
The certificate arrives by e-mail, together with the chain of trust (intermediate certificates) the server must serve alongside it.
right after validation -
Installation
We install the certificate and switch the site to HTTPS. If your site is hosted with us, there is nothing for you to do. Check the result with our SSL checker.
same day
Free
SSL tools
Seven tools for everything around a certificate that is otherwise done by hand — from creating a CSR to finding out why the padlock will not show.
CSR generator
Create a CSR and a private key, without the command line.
Open toolCSR decoder
Check exactly what a CSR says before you send it.
Open toolSSL converter
Convert a certificate between PEM, DER, PFX and P7B.
Open toolSSL checker
See whether a certificate is installed correctly and when it expires.
Open toolCertificate decoder
Read what is inside a certificate — domain, issuer, validity.
Open toolCertificate/key matcher
Check whether a certificate and a private key really belong together.
Open toolWhy no padlock?
Find what on the page still loads over HTTP and breaks the padlock.
Open toolHelp
Frequently asked questions about SSL
What is SSL?
SSL (today technically TLS) encrypts the traffic between a visitor's browser and your server, so what travels between them - passwords, form contents, card details - cannot be read on the way. A site with a valid certificate is served over HTTPS and shows a padlock; a site without one is marked "Not secure" by every current browser.
What is the difference between DV, OV and EV?
The encryption is the same in all three - what differs is how much the certificate authority verifies. DV checks only that you control the domain and is issued in minutes. OV verifies the organisation and writes its name into the certificate. EV is the strictest check and carries the full legal identity of the company. If you only need HTTPS and the padlock, DV is enough.
Do EV certificates still show a green address bar?
No. Browsers removed the green EV address bar in 2019, so no certificate gives you one today - be careful with any provider still advertising it. What an EV certificate does give you is your company's verified legal identity written into the certificate, which a visitor sees on clicking the padlock, and the highest warranty levels.
What does a Wildcard certificate cover?
One Wildcard certificate secures a domain and an unlimited number of its subdomains at the same level - it is issued as *.yoursite.rs, so shop.yoursite.rs, mail.yoursite.rs and blog.yoursite.rs are all covered by one certificate and one renewal. It does not cover a different domain - for that you need a Multi-domain certificate.
Can I use a certificate on a mail server?
Yes. The same certificate can secure your website and your mail server (IMAP, POP3 and SMTP over SSL/TLS), as long as it is issued for the hostname the mail service runs on. A Wildcard certificate is the usual choice when mail sits on a subdomain such as mail.yoursite.rs.
How long does a certificate last, and how is it renewed?
You are billed annually. The technical lifetime of a certificate is being shortened across the industry, so a certificate is reissued more often than once a year - that reissuance is included, not charged extra, and we tell you when it is due. Billing stays annual either way.
Do I need a paid certificate if hosting includes a free one?
For most sites, no. Every hosting plan includes a free DV certificate, which gives you HTTPS and the padlock. A paid certificate is worth it when you want your company identity verified in the certificate (OV or EV), a warranty, a site seal, or one certificate covering many subdomains or domains.
How do I install the certificate?
On our hosting we install it for you - open a ticket and we handle it. On your own server you generate a CSR, send it for issuance and install the certificate that comes back; our free SSL tools cover every step, including a CSR generator, a certificate decoder and a checker that tells you whether the installation is correct.
More answers in the knowledge base, or ask technical support.
SSL certificates
Buying an SSL certificate for a website or a mail server
SkyHosting sells SSL certificates from RapidSSL, GeoTrust and Comodo, from 25 EUR a year, in DV, OV and EV validation and in single-domain, Wildcard and Multi-domain coverage. Certificates are supplied through thesslstore.com and the cheapest DV certificates are issued within minutes.