Wait! Don't Leave Without Securing Your Site
Get enterprise - grade SSL certificates at a fraction of retail prices.
Save 10% on your first order, by entering coupon code SAVE10 during checkout.
FAQs
All
Business Validation
Certificate Authorities
Certificate Key Matcher
Changes
Code Signing
Configuration
CPAC
CSR Code
CSR Decoder
CSR Generation Tutorials
CSR Generator
DigiCert
Domain Validation
Extended Validation
General
Install SSL Certificates
Installation
IP Address
LEI
Multi Domain
Payments
Private Key
Renewal
S/MIME
SSL Automation
Types
Updates
Valimail
Wildcard
Can I match a CSR to a certificate as well?
Yes. Fill all three fields and the matcher also compares the CSR with the certificate and with the private key. The CSR field is optional, and you can match a CSR against a private key with no certificate at all.
Copy Link
How do I know if my private key matches my certificate?
Paste both into the tool and read the certificate-to-private-key verdict. A match means the public-key fingerprints are identical; a single differing character means they are not a pair.
Copy Link
Does the Certificate Key Matcher upload my private key?
No. Your files are read and compared inside your browser, and nothing is transmitted. You can disconnect from the internet before running a check and it still works.
Copy Link
Is EV SSL dead?
No, but its most visible feature is gone. Browsers removed the EV company-name indicator from the address bar between 2018 and 2019, so visitors no longer see your organization name without clicking the padlock. The underlying identity verification, the legal name embedded in the certificate, and the warranty are unchanged. See the section above for where that verified identity is still used.
Copy Link
Can I switch if I already have an SSL certificate from another provider?
Yes. The bundles include a new SSL certificate alongside the automation agent. If you currently hold a certificate from another provider, you can transition when your existing certificate comes up for renewal. Once configured, the agent manages all future renewals on its own.
Copy Link
Are wildcard certificates supported?
Yes. Both the RapidSSL Wildcard + Automate and GeoTrust QuickSSL Premium Wildcard + Automate plans cover unlimited subdomains on a single level (for example, shop.example.com, mail.example.com, app.example.com). Wildcard certificates require DNS-based validation, which the agent handles automatically for supported DNS hosts.
Copy Link
Why is SSL certificate automation becoming necessary?
Maximum certificate validity is dropping to 200 days (March 2026), 100 days (2027), and a 47-day maximum (2029) under Ballot SC-081v3. Domain validation reuse shrinks to 10 days on the same schedule. Renewing by hand at that frequency is unsustainable.
Copy Link
How much do the plans cost?
Starting at $23/yr (RapidSSL + Automate) up to $285/yr (GeoTrust QuickSSL Premium Wildcard + Automate). Every plan includes the certificate, the AutoInstall SSL® agent, and ACME support for one year.
Copy Link
How is AutoInstall SSL® different from Let’s Encrypt or Certbot?
The key differences are warranty coverage (up to $500,000), a CA-issued site seal, 24/7 support, and a managed agent that requires no ongoing maintenance. Because every plan also supports ACME, you can still use Certbot if you prefer, with a commercially trusted, warranty-backed certificate.
Copy Link
Does it work with shared hosting?
No. Shared hosting lacks the server-level access the agent depends on. It works only where you have root or admin privileges. See “Environments Not Supported” above, or visit our SSL installation guides for manual setup options.
Copy Link