SSL certificates
SSL certificate types at ZRAZU
DV, Wildcard, Multi-domain, OV and EV: how the certificates differ, when the free one is enough, and how the 1-year subscription renews in parts.
An SSL certificate turns on https for your site: data between the visitor and the site is encrypted, and the browser sees that the domain really is yours. ZRAZU offers a free Let’s Encrypt certificate and paid certificates with a subscription.
Which type you need
| Type | What it contains | Who it is for |
|---|---|---|
| DV | Proof that the domain is yours | Most sites that need an invoice, contract and act, or the guarantee of the certificate authority |
| Wildcard | One certificate for the domain and all its first-level subdomains (*.example.com) | Many subdomains of one site |
| Multi-domain (SAN) | Several different domains in one certificate | Several separate sites that are easier to manage together |
| OV | The verified name of the organization is in the certificate | When a bank, partner or tender asks for a verified organization |
| EV | Extended verification of the organization | Only if a regulator or partner explicitly requires it |
Encryption is the same for every type, and the same as in the free Let’s Encrypt. Paid certificates differ in the guarantee of the certificate authority, closing documents and support. The type of certificate does not affect Google rankings. EV looks no different in the browser address bar.
Wildcard covers subdomains of one level (shop.example.com), but not example.com itself and not a.b.example.com. How many names you can add to a Multi-domain certificate depends on the certificate you choose: the order form shows the limit.
Prices and the full list are on the page https://zrazu.com/prices/; the types are described in the section https://zrazu.com/ssl/.
Is the free one enough
Let’s Encrypt is included with ZRAZU at no extra charge, is issued on its own and renews automatically, wildcard included, when the domain is on our name servers. If that is enough for you, take it: that is perfectly fine.
You need a paid certificate when:
- your accountants need an invoice, contract and act;
- a partner, bank or tender asks for a purchased certificate;
- you need the guarantee of the certificate authority or a trust seal on the payment page.
The 1-year subscription
A paid certificate is sold as a 1-year subscription. One issued certificate is valid for a limited time (currently up to 200 days, shorter later under industry rules), so the subscription runs in parts: when it is time for the next part, we reissue the certificate for the same key at no extra charge.
For the new part to reach your site without your involvement, set up automatic renewal: How automatic certificate renewal works. If you use certbot, acme.sh, Caddy or Kubernetes, there is another way: the ZRAZU ACME server.
What next
- Ordering and activating a certificate
- Domain validation
- Certificate files and installation
- Reissue and revocation
- ACME for certbot and acme.sh
If it didn't work
- “SSL certificates are not on sale yet”. Ordering is temporarily closed. Check later or write to support.
- No order button. An owner, administrator or accountant of the organization can order. A role with permission to view domains can see the certificates.
- You need other names in an already issued certificate. The set of names does not change after issuance: order a new certificate.