Blog · WebJi® India

Types of SSL certificates

Quick answer: An SSL certificate is chosen on two lines. Validation is DV for domain control, OV when the company must be checked, or EV for the strictest company check. Coverage is one hostname, a wildcard for every subdomain of that hostname, or several different domains on one certificate. Encryption does not change between those types.
✓ In business since 2005✓ INR + GST billing✓ 24/7 Email Support — avg reply < 60 min
Festive Diwali scene with marigold garlands, gift boxes, diyas and a laptop with a shopping cart — types of ssl certificates

An SSL certificate is chosen on two lines: validation and coverage. DV proves domain control, OV checks the company, and EV is the strictest company check. One hostname uses a single-domain certificate, every subdomain of that name uses a wildcard, and several different domains share a multi-domain certificate. The encryption is the same on each.

What are the types of SSL certificates?

SSL certificates fall into validation types and coverage types, and you pick one of each. Validation is how far the certificate authority checks identity. Coverage is which hostnames the certificate is allowed to serve. Browsers still show a padlock for any valid type.

People still say SSL. Browsers use TLS, which replaced SSL, and TLS uses a certificate on the server to start the encrypted session. A product sold as SSL is a TLS certificate. The rename does not add a fourth validation level. The SSL certificate catalogue at WebJi® groups the same types.

  • Validation — DV, OV, or EV.
  • Coverage — single-domain, wildcard, or multi-domain (also called SAN).
  • Encryption — the same TLS on each type. The difference is identity and hostnames, not a stronger cipher.
Festive Diwali scene with marigold garlands, gift boxes, diyas and a laptop with a shopping cart — types of ssl certificates

How do DV, OV, and EV differ?

Domain validation (DV) proves control of the domain, usually by an email or a DNS record. It does not put a company name in the certificate. It is the right type for a blog, a brochure, or any site that only needs the padlock.

Organization validation (OV) checks that the organization is a real business and that it controls the domain. The company name appears in the certificate details. Use it when a customer or a vendor will open the certificate and look for that name. The OV SSL certificate page is that product.

Extended validation (EV) is a longer manual check of the legal entity, its address, and its right to the domain. It does not make the encryption stronger. Ask for it when a checkout, a bank, or a written policy requires the strictest check. The EV SSL certificate page is where that quote starts.

OV and EV are not a fixed row in the live catalogue. Email support@webji.services and the price is sent before you pay. A paid DV or wildcard uses the rows in the price table below.

What do single, wildcard, and multi-domain certificates cover?

A single-domain certificate covers one hostname. On the published Sectigo DV row that is the www name and the bare domain together. It does not cover shop.example.com or any other subdomain.

A wildcard covers one domain and the subdomains under it, written as *.example.com. Mail, shop, and app can share it. It does not cover a second domain such as example.net, and it does not cover a name such as a.b.example.com. The wildcard SSL certificate page is that product.

A multi-domain certificate, also called SAN, lists several different names on one certificate. Each name has to be entered. Use it when the sites are not subdomains of one domain, so one expiry date covers the set.

In WHM, Manage Service SSL Certificates installs certificates for the server's own services, such as the panel, mail, and FTP. It is not the screen that chooses DV, OV, or EV for the public website.

Which type should you buy?

Match the names first, then the identity check. A mismatch on the hostname causes a browser warning even when the validation level is the one you wanted.

TypeChoose it whenIt does not
DVYou need HTTPS and no company name in the certificateName the organization
OVA customer or vendor should see the company nameSkip the company check
EVA policy or checkout requires the strictest company checkChange the encryption
Single-domainOne website, including wwwCover other subdomains
WildcardMany subdomains of one domainCover a second domain
Multi-domainSeveral unrelated domains on one certificateCover every future subdomain on its own

Code signing is a different product. It signs software you distribute. It does not put HTTPS on a website, so it is not one of the site types in the table.

What does WebJi® charge for an SSL certificate?

These rows are the live Sectigo prices, in INR per year, before 18% GST. They were read from the billing catalogue on 29 October 2026. Another company's dollar price is not this bill.

CertificateCoversPrice (₹/yr)
Sectigo Positive SSLwww + non-www of one domain (DV)1,800
Sectigo Positive SSL Wildcard1 domain + all sub-domains7,500
Sectigo Code Signing SSLCode-signing certificates for software7,200

Let's Encrypt DV is included with WebJi® hosting. OV and EV are quoted by email at support@webji.services before payment. Do not treat the code-signing row as a website certificate.

When is a free SSL certificate enough?

A free DV certificate is enough when the site needs encryption and nothing more. The padlock uses the same kind of TLS as a paid DV certificate. It is not enough when you need the company name in the certificate, a wildcard for every subdomain, or several unrelated domains.

AutoSSL on WebJi® cPanel hosting renews the included Let's Encrypt certificate. A paid certificate is a separate install. You know the free certificate is in place when SSL/TLS Status shows a future expiry for the hostname you serve.

How do you order the certificate you chose?

Write the hostnames before you pay. The certificate can only cover names that were on the order.

  1. List every hostname that must load without a warning, including the bare domain, www, and any subdomain.
  2. If the list is one site, order a single-domain certificate. If it is subdomains of one domain, order a wildcard. If it is different domains, order a multi-domain certificate.
  3. Stay on DV, including the free certificate on WebJi® hosting, unless someone must see the company name. Then ask for OV. Ask for EV only when a policy requires that check.
  4. Email support@webji.services with the hostname list and the type. The desk replies in Hindi or English, usually within 60 minutes, and sends the price before you pay when the type is not on the table above.

You know it worked when the hostname shows a padlock and the certificate's name list matches the hostnames you wrote down. Support is email only at support@webji.services. The office phone is not a 24/7 support line.

Frequently Asked Questions

What are the types of SSL certificates?

The types split by validation and by coverage. Validation is DV, OV, or EV. Coverage is single-domain, wildcard, or multi-domain (SAN). You choose one validation level and one coverage shape. TLS is the current name for the encryption still sold as SSL.

What is the difference between DV, OV, and EV?

DV proves you control the domain and does not name a company. OV adds a check that the organization is real and puts that name in the certificate. EV is a longer manual check of the legal entity. Encryption is the same on all three.

Do I need a wildcard SSL certificate?

You need a wildcard when several hostnames share one domain, such as shop.example.com and mail.example.com. A single-domain certificate does not cover those names. A wildcard does not cover a second domain. That needs a multi-domain certificate or another certificate.

How much does an SSL certificate cost from WebJi®?

Sectigo Positive SSL (DV, one domain) is ₹1,800 a year and the Sectigo wildcard is ₹7,500 a year, both before 18% GST. Code signing is ₹7,200 a year and is not a website certificate. OV and EV are quoted by email at support@webji.services before you pay.

Is a free SSL certificate safe to use?

Yes for encryption. The included Let's Encrypt certificate is DV and uses TLS, the same job as a paid DV certificate. It does not show a vetted company name, and a standard free certificate is not a wildcard. Use a paid certificate for OV, EV, or wildcard coverage.

What is SSL called now?

Browsers use TLS. SSL is the older protocol name that hosts still print on the certificate product. A certificate sold as SSL is a TLS certificate. DV, OV, EV, wildcard, and multi-domain still mean the same things.

Need help with this?

WebJi® support does it for you — free. Talk to our Jaipur team →