SSL Certificates — DV, OV, EV & Wildcard
The padlock in your browser's address bar. SSL certificates encrypt the connection between your visitors and your site. Every Bitfoo hosting plan includes a free Let's Encrypt SSL — paid certificates add warranty, identity validation, 1-year validity — compared to 90 days for free Let's Encrypt certificates, which auto-renew but require your server to be continuously reachable for renewal checks — and wildcard coverage.
Free SSL vs. paid certificates
Every Bitfoo hosting plan includes a free Let's Encrypt SSL. For most websites — blogs, portfolios, small business sites — that's all you need. It encrypts the connection and shows the padlock. Paid certificates add 1-year validity — compared to 90 days for free Let's Encrypt certificates, which auto-renew but require your server to be continuously reachable for renewal checks — warranty coverage, business identity validation (OV/EV — your verified company name appears in the certificate), and dedicated support for certificate issues. If the free option serves your needs, use it. If you're past that threshold — running e-commerce, handling client data, or managing multiple subdomains — the table below covers what's available.
Running a store specifically? See our WooCommerce hosting page for the hosting and SSL context together.
Certificate types
| Type | Validation | Issuance | Warranty | Best for | Price |
|---|---|---|---|---|---|
| Domain Validation (DV) | Domain only | Minutes | — | Blogs, personal sites, small businesses | [price] |
| Organization Validation (OV) | Domain + business identity | 1–3 days | $100,000 | Businesses where clients or partners may inspect the certificate | [price] |
| Extended Validation (EV) | Full legal entity verification | 1–5 days | $1,750,000 | E-commerce, financial, high-trust sites | [price] |
| Wildcard SSL (DV) | Domain only | Minutes | — | All subdomains (*.domain.com) | [price] |
| Multi-Domain / SAN | Domain or OV | Minutes–days | Varies by validation type | Multiple domains on one certificate | [price] |
Certificates are issued by Sectigo and DigiCert — two of the most widely trusted Certificate Authorities globally, recognised by 99.9%+ of browsers and devices.
Certificate renewal is priced the same as the initial purchase — no first-year promotional rates.
All certificates include
- 256-bit encryption
- SHA-2 / 2048-bit RSA key
- 99.9%+ browser and device compatibility
- Free reissues — if your private key is compromised or your domain configuration changes, your certificate can be reissued at no cost.
- Site seal for display on your website — a trust badge that shows visitors your connection is secured by a verified certificate. Dynamic seals link to live certificate verification.
- Automatic installation and renewal for sites hosted on Bitfoo — manual installation instructions and CSR generation are available for certificates used on external servers.
- Managed and renewed via Bitfoo client portal
- Auto-renewal available
- Covers www and non-www variants (DV single-domain)
Who uses this
Small businesses · Agencies · Developers · SaaS companies · Enterprise
Common questions
What does a Wildcard SSL cover?
A Wildcard SSL covers your main domain and all first-level subdomains. For example, *.example.com covers shop.example.com, blog.example.com, app.example.com — all with a single certificate.
What does a Multi-Domain / SAN certificate cover?
A Multi-Domain SSL (also called a SAN certificate) covers multiple entirely separate domains under a single certificate — for example, yourbrand.com, yourbrand.co.uk, and clientsite.com. Most SAN certificates include a set number of domains (typically 3–5) with the option to add more. They're useful for agencies managing client sites or businesses running multiple separate web properties. SAN certificates are available at DV or OV validation level.
How long does issuance take?
DV certificates are issued in minutes — they only verify domain ownership. OV certificates take 1–3 business days for business identity verification. EV certificates take 1–5 business days for full legal entity verification.
Does EV SSL still show the company name in the browser address bar?
Major browsers removed the green bar and address bar company name display for EV certificates in 2019–2020. The legal entity verification is still visible within the certificate details when a visitor clicks the padlock — and the rigorous validation process is unchanged. EV remains the right choice for financial services, high-trust e-commerce, and organisations that require documented identity assurance in the certificate itself.
Can I manage my SSL from the client portal?
Yes. SSL certificates are managed and renewed through the Bitfoo client portal. Auto-renewal is available so your certificate never lapses unexpectedly.
Are your certificates recognized by all browsers?
Yes. All certificates use SHA-2 / 2048-bit RSA keys and are recognized by 99.9%+ of browsers and devices.
Can I use a Bitfoo SSL certificate on a site hosted elsewhere?
Yes. SSL certificates are not tied to your hosting platform — you can install a certificate purchased through Bitfoo on any web server. If you're also hosting with Bitfoo, installation and renewal are handled automatically through the client portal.