SSL Certificates

The padlock, and what it takes to earn it

Every site needs HTTPS. What differs is how much the authority checks before it signs: your domain, your company, or your company in depth. We sell all three, check your CSR before it is sent, and tell you before it expires.

See every certificateWhich one do I need?Certificates from PKR 4,000/yr
  • Issued in 15 minutes
  • Free, unlimited reissues
  • Full chain, ready to install
A backlit circuit schematic, lines of traces glowing against a dark board
  • DVYour domain is checked. Minutes, no paperwork.
  • OVYour company is checked and named inside it.
  • EVThe strictest check, and the largest warranty.
Why it is worth having

SSL certificate benefits

Customer trust is the reason to buy one. No fuss and someone to call is the reason to buy it from us.

The encryption is the same on all of them

Every certificate we sell uses 2048 to 4096-bit keys and encryption up to 256-bit. A cheaper certificate is not a weaker one: what rises with the price is how deeply the authority checks who you are, not the strength of the padlock.

Browsers stop calling your site not secure

Without HTTPS a browser writes "Not secure" in the address bar before a visitor has read a word of your page. Google has also said HTTPS is one of the signals it ranks on, so going without is paid for twice.

The padlock people actually look for

The root is carried by 99.9% of browsers and operating systems in ordinary use, so visitors see a padlock rather than a warning they have to click through. On organisation and extended validation your company name is inside the certificate too.

It works on whatever you run

Any server, any control panel. Every certificate covers both the www and the bare version of your domain, so one certificate does the job people often buy two for.

Free, unlimited reissues

Change server, add a name or lose a key and we reissue the certificate for nothing, as many times as you need, for the whole term.

Ready to install, and we watch the clock

Download the certificate, the CA bundle or the full chain from your client area, ready for any server or control panel. An expired certificate takes a site down in every browser at once, so we track the date and tell you in good time.

Every certificate

Eight certificates, one table

Prices are per year. A longer term is paid once and holds the rate, so the yearly figure falls as the term lengthens.

One website, HTTPS in minutes

Secures
1 domain
Issued in
15 minutes
Warranty
$10,000
Paperwork
None
PKR 6,000 a year
Buy now

Every subdomain, one certificate

Secures
1 + all subdomains
Issued in
15 minutes
Warranty
$10,000
Paperwork
None
PKR 46,200 a year
Buy now

Several separate domains, one certificate

Secures
3 to 100
Issued in
15 minutes
Warranty
$10,000
Paperwork
None
PKR 19,800 a year
Buy now

Your company checked, not just your domain

Secures
1 domain
Issued in
2 days
Warranty
$250,000
Paperwork
Yes
PKR 19,200 a year
Buy now

Verified company, every subdomain

Secures
1 + all subdomains
Issued in
2 days
Warranty
$250,000
Paperwork
Yes
PKR 108,600 a year
Buy now

Verified company, up to a hundred domains

Secures
3 to 100
Issued in
2 days
Warranty
$250,000
Paperwork
Yes
PKR 45,000 a year
Buy now

The strictest check there is

Secures
1 domain
Issued in
2 weeks
Warranty
$1.75m
Paperwork
Yes
PKR 45,600 a year
Buy now

Extended validation across every domain you own

Secures
3 to 100
Issued in
2 weeks
Warranty
$1.75m
Paperwork
Yes
PKR 74,950 a year
Buy now

Prices are per certificate per year and exclude taxes where they apply. A longer term is paid once, up front, and locks the rate for the whole period.

Prices exclude taxes where they apply. Multi-domain certificates include three domains; more are added at the rate shown on the certificate's own page. Every certificate can be reissued free and as often as you need.

Which one do I need?

Answer one question and you are most of the way there

Nearly every choice comes down to how many names you need to cover and whether anyone needs to see who you are.

Compare validation types

Domain, organisation or extended

The encryption does not change between them. What changes is how much the authority checks before it signs, how long that takes, and how much it will stand behind.

DV

Domain validation

Who it is for
For any website that needs HTTPS
What is checked
That you control the domain
Time to issue
15 minutes
Company paperwork
None
Company named in the certificate
No
Assurance level
Low
Warranty
$10,000
Covers subdomains
Yes, a wildcard is available
Several domains on one certificate
Yes, up to 100
Certificates from
PKR 4,000
OV

Organisation validation

Who it is for
For a company that wants to be named
What is checked
The domain, and that your company is real
Time to issue
2 days
Company paperwork
Required
Company named in the certificate
Yes
Assurance level
High
Warranty
$250,000
Covers subdomains
Yes, a wildcard is available
Several domains on one certificate
Yes, up to 100
Certificates from
PKR 13,450
EV

Extended validation

Who it is for
For shops and anywhere money moves
What is checked
The domain, and your company in depth
Time to issue
2 weeks
Company paperwork
Required
Company named in the certificate
Yes
Assurance level
Very high
Warranty
$1.75m
Covers subdomains
No wildcard at this level
Several domains on one certificate
Yes, up to 100
Certificates from
PKR 32,400

Every figure here is read from the certificate catalogue, so it says the same thing as each certificate's own page. Wildcard and multi-domain availability reflects the certificates we actually sell at that level.

The three levels

What the authority actually checks

This is the only real difference between certificates. The encryption is identical on all of them.

Domain validation

Proves you control the domain, by email, a DNS record or a file on the server. Minutes, no paperwork, and the padlock looks the same as any other.

Organisation validation

The authority confirms your company is real and that you run it, then names it inside the certificate. A couple of days and some paperwork.

Extended validation

The strictest check there is, and the largest warranty. About a fortnight, and the authority will want company records.

Encryption strength does not change between them. What changes is how much a visitor can find out about who is behind the site.

How it goes

From order to padlock

  1. 1

    Tell us the domain

    Order the certificate and send us the domain it is for. If you are not sure which certificate, ask first — we would rather you bought the right one.

  2. 2

    Prove you control it

    A link in an email, a DNS record or a file on the server. Use whichever suits your setup. Organisation and extended validation add a company check on top.

  3. 3

    Ready to install

    Download the certificate, the CA bundle or the full chain from your client area, ready for you, your developer or your host to install on any server or panel.

  4. 4

    We watch the clock

    An expired certificate takes a site down in every browser at once, so we track the date and remind you in good time.

On every certificate

What you get whichever you pick

Free, unlimited reissues

Change server, add a name or lose a key and we reissue the certificate for nothing, as many times as you need, for the life of the term.

2048 to 4096-bit keys

Modern key lengths with encryption up to 256-bit, which is what every current browser and operating system expects.

Trusted by 99.9% of browsers

The root is carried by every browser and operating system in ordinary use, so visitors see a padlock rather than a warning.

Your CSR checked first

We read your CSR before it goes to the authority and flag a missing or mismatched name, then deliver the certificate with its full chain, ready to install.

Reminders before it lapses

An expired certificate takes a site down in every browser at once. We watch the dates and tell you in good time.

15-day refund

If the certificate turns out to be the wrong one, say so within fifteen days and we refund it.

FAQ

Questions before you buy

Answer 01

Do I really need an SSL certificate?

Yes. Browsers mark a site without HTTPS as "not secure" in the address bar, and search engines prefer sites that have it. Anything that takes a login or a form needs one.

Not sure which to buy?Ask an engineer

Tell us the domain and we will find the right certificate.

Send us the name you want secured and what the site does. We will say which certificate fits, check your CSR covers every name, and have it issued ready to install.