Blog | Personal Site | Portfolio | Basic domain(s)
1 domain (CSR) & 4 subdomains (SANs)
Max # of SANs
Domain Validation SSL
Multiple Domain SSL (UCC/SAN)
With / without "www"
Company Documents Required
Support for SAN (UC)
Secure Hash Algorithm
Up to 256-bit
GeoTrust QuickSSL Premium SAN
- Requires Domain Validation
- Ideal for small-to-medium sized businesses
- Secures multiple subdomains
GeoTrust QuickSSL Premium SAN certificate is a simple solution to secure the main domain and any four subdomains at once. It has four SANs (additional domain names) available, so you may use them for securing subdomains only. Perfect for a small website to protect the mail server and the client area, this SSL is not a classical multi-domain (SAN) SSL certificate but more like a “mini-Wildcard.”
GeoTrust QuickSSL Premium SAN is available to you in just five minutes. With no paperwork required to pass the domain validation, all you have to do is follow a simple, automated process to confirm domain ownership.
Secures 4 subdomains
Along with your main domain, you can secure up to 4 subdomains with this flexible SAN certificate. It’s a great way to save money and time during configuration and renewal. Instead of buying several SSL certificates to protect additional subdomains, this one affordable cert is all that you need.
Compatible with almost any platform
All GeoTrust certificates are compatible with leading servers and email clients. They work flawlessly on Windows, Linux, macOS, and other popular platforms. And, with 99.3% browser compatibility, all your visitors will see the SSL padlock next to your URL. without the annoying SSL connection errors and warnings popping up on their desktop and mobile devices.
This SAN certificate follows the latest data protection standards set by the regulatory authorities. The 256-bit SSL encryption and the 2048-bit RSA signature key are more than enough to secure sensitive information. The leading banks and e-commerce platforms use the same security and encryption.
GeoTrust QuickSSL Premium SAN comes with a massive half a million USD warranty to cover any potential losses in the unlikely event of a data breach or mistake on GeoTrust’s end.
The GeoTrust Secured site seal is a powerful addition to any website. Whether you want to boost your sales or enhance your reputation, this dynamic site seal is exactly what you need. Place it anywhere on your key pages, and watch the magic happen.
Unlimited server licensing and unlimited reissues
You can re-issue this certificate free of charge an unlimited number of times and use it on as many servers as you need before its expiration date.
Here is a list with the most common questions our customers have when buying a Multi-Domain SSL Certificate with Business / Organization Validation:
The Domain Validation (DV) SSL certificate is the most affordable choice for increasing the security of your blog, personal or small business website. Since there is no required paperwork, the process of acquiring the Domain Validation certificate is very quick and easy: you will have to prove that you are the domain owner just by responding to an automatic e-mail message. After a couple of minutes, you will receive the issued SSL certificate which can be installed immediately. Sites with Domain Validation certification can be identified by the padlock that is displayed by most web browsers.
This type of SSL certificates is recommended to be used if you need to prove that your site is secured, by having a secured connection. The Domain Validation certificates don’t display the legal entity, as the identity of the website owner is not checked while issuing them. So, if you have an e-commerce website or a site that collects users’ personal data, you should consider buying our Business Validation (BV) or Extended Validation (EV) certificates, which will make your site more trustworthy.
When requesting an SSL Certificate you have to prove that you own or you have management rights over the domain or sub-domain that you are requesting an SSL Certificate for.
Important! As of June 16, 2021, Sectigo no longer accepts WHOIS-based email addresses for Domain Control Validation (DCV).
STEP 1: Domain Validation (DV)
If you have an SSL Certificate issued by Sectigo, GoGetSSL, GeoTrust, Thawte, DigiCert, and RapidSSL, then you can complete the domain validation is by responding to an automated domain validation message sent to your email address. You will be given a list of emails to choose from, and the automated domain validation message will be sent to the email address that you choose.
Always check your email address (including your Spam folder) so as you should receive an email message from the Certificate Authority with instructions on how to validate (prove the ownership of) your domain name. The email message will ask you to copy a unique code and paste it on a specific link provided in the same email message.
Important: Only 5 e-mail addresses are allowed for domain validation: [email protected], [email protected], [email protected], [email protected], and [email protected]
In some cases, the Certificate Authority may allow your administrative e-mail from WHOIS, too, but ONLY IF the Private registration is disabled.
B. HTTP / HTTPS method
The HTTP validation consists of uploading a TXT validation file to a pre-defined location on your website. You have to make sure that you can access this file and link from any web browser. Once you proceed with this domain validation method, the CA will run a scan of your website and will look particularly for this file at the given link. Your SSL Certificate will pass the domain validation within a few minutes after the CA’s crawler system finds the TXT file on your website.
The HTTPS validation method is the same validation method as described above. You should choose the HTTPS option if you already have an SSL Certificate installed on your website.
C. DNS method
You can also add a pre-defined domain record to your domain registrar (the website where you registered your domain name). Make sure that your firewall doesn’t block the CA’s validation robot.
Sectigo and GoGetSSL require CNAME DNS type, which looks like:
while DigiCert (Thawte, GeoTrust, RapidSSL) require TXT DNS type, which looks like:
yourwebsite.com TXT “w34f54t4t45t354eer98rn4jf4449nfrf”
dnsauth.yourwebsite.com TXT “w34f54t4t45t354eer98rn4jf4449nfrf”
Please note that newly added DNS records take between 10-48 minutes to propagate. This means that you will have to wait up to 48 hours to pass the domain validation if you go with this method. That is why we recommend the Email, HTTP, and HTTPS methods better because they would allow you to pass the domain validation instantly.
STEP 2: CAA Check
As of 8th September 2017, all Certificate Authorities (CAs) are obliged to respect your CAA policy, as a security measure.
The CAA record should allow the CA to issue the SSL for your domain name, otherwise, the order would be set as Pending until you update the record.
By default, if no CAA record found, any CA may issue SSL for your domain name. Otherwise, you should update your CAA record.
In some cases, the CAs may require manual verification if your order fails any internal rules of Brand Validation.
It takes around 24-48 hours to pass this manual check, and the CA will either issue or reject an order in such cases.
Here are the reasons why your order is under Brand Validation.
How to change the domain validation method?
If you chose one of these domain validation methods described above, and you see that your domain doesn’t get validated, then you can always change your domain validation method. Please go to this link to learn how to do that.
In order to buy a Domain Validated certificate, you do not need to provide any documentation. You will have to confirm the domain ownership through a simple email, DNS record, or file-based authentication (except wildcard SSL certificates). Following completion of one of these elements, the DV certificate will be signed and released to you.
The Subject Alternative Name (SAN) SSL certificate, also called the Unified Communication Certificate (UCC) or the Multi-Domain SSL certificate was particularly developed to secure all your domains and subdomains by owning one single SSL certificate. This type of certificate ensures the security for both, your internal and external domains/subdomains and is fully compatible with your Microsoft Exchange products and Microsoft Office Communications Server.
UCC/SAN SSL certificates are not just easy to be managed but are the most cost-effective option. These certificates give you the opportunity to secure your main domain, for example, ssldragon.com, together with many other totally distinct domains, like ssldragon.net, ssldragonsslcertificates.com and its subdomains mail.ssldragon.com and account.ssldragon.com – all with 1 single certificate. Besides, unlike Wildcard SSL certificates, UCC/SAN certificates are available in all three validation methods: Domain Validation (DV), Business Validation (BV) and Extended Validation (EV).
You can find our full list of Multi Domain (UCC/SAN) SSL Certificates at this link.
A Multi-Domain (SAN) SSL Certificate is specifically created to allow users to secure multiple domains and/or multiple sub-domains with one single SSL Certificate. Depending on the SSL Certificate product and brand, the certificate will include a different number of additional domains (called SANs) at the price quoted on the SSL Certificate’s details page (see screenshot on the right).
For example, a Multi-Domain (SAN) SSL Certificate that has 4 domains by default allows you to secure:
- Four different domains:
- Four different subdomains:
- Four different domains and subdomains:
NOTE: Here is how you should configure your Multi-Domain SSL Certificate on our website: When you generate a CSR (Certificate Signing Request), please include one single domain name or sub-domain in it, such as: www.example.com. The rest of the domains or sub-domains, which are called SANs (2nd, 3rd, 4th domains or sub-domains) should be included in the fields for additional domains. You will see the fields for additional domains on the SSL Certificate configuration form, right under the text area for the CSR (see screenshot on the right).
When you buy or configure your Multi-Domain (SAN) SSL Certificate, please note that most Multi-Domain Certificates do not secure the domains with and without “www”. With other words if you want to secure both, example.com and www.example.com under one single Multi-Domain Certificate, that will be considered as two different domain names. The screenshot on the right shows you where you can find the attribute that tells you if your Multi-Domain Certificate secures both “www” and “non-www” under one single domain (SAN), or not.
Anyway, that is not a problem so as you cannot have the same website open both as www.example.com and as example.com. All website owners only choose one of these options and make the other option automatically re-direct to the other. For example, you can choose your website to always open at www.example.com and anybody who enters on example.com is automatically redirected to www.example.com. In this way, you only have to secure one domain, and that is: www.example.com.
The multi-domain certificate can be initially activated for the primary domain name.
If you wish to add more domains later, you need to reissue the certificate in your SSLDragon.com account, and add the SAN (additional domain) list in the SAN field, when reissuing.
If you need to add more domains than included by default, then please choose the Add More SANs option in order to pay for and activate the additional SANs.
When you buy a multi-domain SSL Certificate and you include several domain names and/or sub-domains in it, the Certificate Authorities require you to pass the domain validation for each and every domain name and/or sub-domain that you included in your multi-domain SSL Certificate, and only after that, the multi-domain SSL Certificate will be issued to you.
POSSIBLE PROBLEM: Sometimes the email addresses, or your HTTP options, or the DNS records that you choose for your multi-domain certificate do not get set correctly when they reach the Certificate Authority. You will know that when you see that you only got one single domain validation message to your email address instead of getting several domain validation messages, or your multi-domain SSL Certificate’s status still shows as “Awaiting Validation (Full)” even though you passed the domain validation for one of the domains.
HOW TO FIX: There is an easy way to fix that, and that requires getting in contact with the Certificate Authority’s Validation Department. When you contact them, please provide them your “Partner Order ID” (see screenshot on the right), and then tell them about the domain validation method that you chose to go with: HTTP, DNS, or Email. If you chose to pass the domains validation by email, then double-check with the Validation Department representatives what email addresses are set in their system, and ask them to send you the domain validation messages to your desired email addresses.
Please call Sectigo Validation Department at +1 (888) 266-6361 (Ext 4) or https://sectigo.com/support for the above-stated reasons. When you talk to them, you will need to provide them your “Partner Order ID”.
Thawte, GeoTrust, DigiCert
Please call Thawte, GeoTrust, DigiCert Validation Department at +1 (520) 477-3152 (Ext 2) for the above-stated reasons. Please note that Thawte, GeoTrust, DigiCert are all owned by DigiCert, and they all have the same phone number provided above. When you talk to them, you will need to provide the “Partner Order ID”.
You can receive a refund ONLY for the additional domains (SANs) that you bought and NOT used.
If you have already activated the SAN (additional domain) for a particular domain name, then you cannot be refunded for that specific domain name.
The Multi-Domain (UCC/SAN) SSL Certificate allows you to secure multiple domains or subdomains which are hosted either on one IP address or different IP addresses. This SSL Certificate type was particularly designed to secure multiple websites within one single SSL Certificate as an easy-to-use and cost-effective solution.
To add your Company Name and TAX/VAT number, you have to login into your SSL Dragon Account and follow these steps:
- Click on the “Hello, *Your Name*” button on the right top side of your account dashboard and select “Edit Account Settings”;
- On the ‘My Details’ page, you will find the ‘Company Name’ and ‘Company TAX/VAT ID’ field;
- Fill in these fields with the necessary information then click on ’Save Changes’.
After you perform the above steps, your SSL Dragon account and all your invoices will be automatically updated with this information.
There are many different ways to install an SSL Certificate, and they all depend on your SSL Certificate brand, the webserver type, the operating system on your server, and the web hosting panel that you have on your server.
These being said, please check our Installation Articles to get detailed instructions on how to install your SSL Certificate on about 44 different server types, hosting panels, and operating systems.
We always recommend you get specialized help with your SSL Certificate installation. If you have a web developer or a system engineer, then they would be the right people to help you with your SSL Certificate installation.
Server Platforms And Mobile Browser Compatibility
- BEA Weblogic
- IBM HTTP Server
- Microsoft ISA
- Microsoft IIS
- Microsoft SQL Server 2005
- Microsoft Live Communication
- BEA Weblogic
- Lotus Domino
- C2Net Stronghold
- Java Web Server (Javasoft / Sun)
- Ensim Control Panel
- cPanel / Web Host Manager
- C2Net Stronghold
- iPlanet Server / Sun One
- Java Web Server (Javasoft / Sun)
- Lotus Domino
- Netscape Enterprise Server
- Novell ConsoleOne
- Novel Webserver
- C2Net Stronghold
- And other SSL-Capable Servers
- Apple iPhone, iPod Safari 1+
- Microsoft Windows Mobile 5/6*
- Opera Mobile 6+
- Opera Mini v3+
- ACCESS NetFront Browser v3.4 +
- RIM Blackberry v4.2.1 +
- KDDI Openwave v22.214.171.124 +
- Netscape Communicator 4.51+
- NTT / DoCoMo
- Nintendo Wii
- Sony Playstation 3
- Sony Playstation Portable
- Lotus Notes (6+)
- Microsoft Outlook 99+
- Mozilla Thunderbird 1.0+
- Mail.app (Mac OS X)v
- Microsoft Entourage (OS/X)
- Microsoft Outlook Express 5+
- The Bat 1+
- Qualcomm Eudora 6.2+
- Windows Mail 1.0+ (Vista)
Need help securing your website? Have questions, or unsure which SSL to choose? Let our fearless dragons help you! Follow the following steps towards getting the type of help that you need.
1. Use our Wizard and find the SSL Certificate that suits you best;
2. Find your answers on our Frequently Asked Questions page;
3. Open a Ticket with our Sales, Billing and Technical Support dragons. We will answer your ticket as soon as possible. We work Monday through Saturday, from 9 AM to 11:00 PM Pacific Time;
4. Email us using our Contact Form.