SSL certificate
DV certificate
Confirms the domain is yours and gives you what the free one cannot: an invoice, a contract and a delivery note, a trust seal, a certificate authority warranty and our support. The encryption is the same.
How DV differs from the free one
| What we compare | Let’s Encrypt | DV |
|---|---|---|
| Encryption | the same | the same |
| Price | free | — |
| Reissue and install | automatic | automatic, within the subscription |
| Invoice, contract, delivery note | none | yes |
| Trust seal for your site | none | yes |
| Support | community and documentation | ours, we answer for the expiry date |
| Certificate authority warranty | none | yes |
| Compatibility with older systems | modern browsers and systems | wider |
| Where it can be issued | wherever ACME works | also where ACME isn’t available |
| Google rankings | the same | the same |
The Google row is here on purpose: a paid certificate does not lift your site in search, and we do not promise that it will. Google treats HTTPS as a lightweight ranking factor and does not use it for indexing at all; the type and price of the certificate make no difference to search.
DV: when you need it, when you don’t
You need it if
You need paperwork — an invoice, a contract and a delivery note: a free certificate cannot go through your accounts. A tender, a bank or a counterparty asks for a “purchased certificate”. You need a trust seal on the payment page or a certificate authority warranty. You have clients on older systems that the Let’s Encrypt chain does not suit.
You don’t need it if
Your free Let’s Encrypt already works and no counterparty has any special requirement.
We reissue it without you
Everything that repeats within the subscription is automated.
- 01Domain on our NSWe add the domain validation record ourselves at every reissue.
- 02Domain on other NSYou add a CNAME to our validation zone once. Then it’s automatic too.
- 03FallbackIf nothing else works: an email with a single confirm button.
_acme-challenge.kava.com.ua CNAME k7f2.acme.zrazu.comWhy a subscription, not a “2-year certificate”
Certificate authorities are shortening the life of a single certificate for everyone. So you buy a subscription, and we replace the certificate inside it.
- 200 daysfrom 15.03.2026 — now
- 100 daysfrom 15.03.2027
- 47 daysfrom 15.03.2029
Common questions about DV
Does a paid DV protect better than the free one?
No. The encryption is the same as Let’s Encrypt. The differences are the certificate authority warranty and compatibility with older systems.
Why a subscription and not a 2-year certificate?
A single certificate now lives no longer than 200 days, from 15.03.2027 — 100, from 15.03.2029 — 47. So we sell a subscription: within it we reissue and install the certificate automatically.
What do I need to do at reissue?
Nothing if the domain is on our NS: we add the validation record ourselves. With other NS you add a CNAME once, then everything is automatic.
When don’t I need DV?
When the free certificate works for you and you need neither a certificate authority warranty nor compatibility with older systems.