Skip to content
IDX Cloud is live - deploy from Git in 30 secondsFree managed migration on every annual plan24/7 SupportIDX Cloud is live - deploy from Git in 30 secondsFree managed migration on every annual plan24/7 SupportIDX Cloud is live - deploy from Git in 30 secondsFree managed migration on every annual plan24/7 Support

SSL certificate types: DV, OV, EV, wildcard and multi-domain explained

Every certificate encrypts traffic the same way. They differ in how thoroughly the certificate authority checks who you are, and in how many names one certificate covers.

IDX·October 19, 2026·1 min read

An SSL/TLS certificate lets browsers confirm they are talking to your real website and encrypts the connection. Encryption strength is the same across certificate types; what changes is the validation and the coverage.

By validation level

  • Domain Validated (DV): the certificate authority checks only that you control the domain. Issued in minutes, often automatically and free. Right for most websites, blogs and applications.
  • Organisation Validated (OV): the authority also verifies that your organisation legally exists. The organisation's name appears in the certificate details. Often chosen for business and corporate sites, and sometimes required by partners.
  • Extended Validation (EV): the most thorough checks of the organisation's identity. Browsers no longer show EV prominently in the address bar, but some regulated industries and procurement processes still ask for it.

By coverage

  • Single domain: one name, for example www.yourbusiness.com (usually also covering yourbusiness.com).
  • Wildcard: all first-level subdomains of a domain, such as *.yourbusiness.com. Convenient, but the same key protects every subdomain, so guard it carefully.
  • Multi-domain (SAN): several different names in one certificate, for example yourbusiness.com, yourbusiness.net and shop.yourbrand.com.

Choosing

  • Most sites: DV, renewed automatically.
  • Corporate sites, customer portals, partner requirements: OV.
  • Regulated or procurement-driven needs: check whether EV is required.
  • Many subdomains: wildcard, or automated DV for each.

Lifetimes are shrinking for all of them

The CA/Browser Forum has voted to reduce maximum certificate lifetimes step by step, reaching 47 days in 2029. Whatever type you choose, plan for automated renewal.

How IDX helps

Every IDX shared and web hosting plan includes a free SSL certificate. IDX SSL Certificates also offers organisation and extended validation certificates, wildcard and multi-domain options, with help through validation and installation.

IDX on digital infrastructure

Back to blog →

More in Guides

Guides

Moving your website to a new host without downtime

A careful migration copies everything, tests it on the new server, then switches DNS with a short TTL. Customers should never notice.

Guides

DNS for business owners: the records that keep your website and email working

DNS translates your domain into the addresses of the services behind it. A handful of record types control your website, your email and your security. Here is what each one does.

Ready to move to hosting that keeps up?

Start today with a free migration and a money-back guarantee.

Get startedTalk to an expert