Sectigo® CaaS OV + Multi Domain Information

Sectigo® CaaS OV + Multi Domain is a multi-domain SSL Certificate delivered through Trustico® Certificate as a Service (CaaS) that adds a verified organization identity through Organization Validation (OV). It secures a primary domain along with a group of additional names, held together as Subject Alternative Names (SANs) on one SSL Certificate.

The SSL Certificate is issued and reissued automatically through the Automatic Certificate Management Environment (ACME) protocol, the same as any other CaaS SSL Certificate, while your checked organization details are recorded across every secured name. Coverage runs from a few names to hundreds, with more available as additional Subject Alternative Names (SANs).

It suits a business running several websites, a set of brand or regional domains, and teams that provision and retire names through automation rather than by hand, where a checked identity should sit behind each name. Learn About Multi Domain Coverage 🔗

Secures Multiple Domain Names 🔗 Verified Organization Validation (OV) 🔗
USD $1,000,000 Relying Party Warranty 🔗 2048-bit Industry Standard SSL Certificate
Requires a Pre-Validation Reference 🔗 Automated Domain Control Validation (DCV) 🔗
Additional SANs Available Includes Hosted Issuance Tool 🔗
Includes Sectigo® Site Seal 🔗 Unlimited Server Licenses
Automated Installation Unlimited Reissue Policy 🔗
99.9% Web Browser Ubiquity 🔗 Extend the License Without Reinstallation

The sections below explain what the SSL Certificate covers, how it is validated, and how the automation works.

Sectigo® as a Trusted Certificate Authority (CA)

Sectigo® is a long-established, widely trusted commercial Certificate Authority (CA), with root Certificates present in virtually every browser, operating system, and device. An SSL Certificate issued under the Sectigo® roots is recognized straight away, with no extra configuration or trust store updates.

Choosing Sectigo® CaaS OV + Multi Domain gives you that established trust together with a verified organization identity and automated delivery through the Trustico® platform. Learn About the Sectigo® Certificate Authority (CA) 🔗

Multiple Names on One Automated SSL Certificate

A multi-domain SSL Certificate holds several separate names on one SSL Certificate through Subject Alternative Names (SANs). Those names can be different domains, such as example.com, example.net, and another-brand.com, along with subdomains, all covered by a single SSL Certificate, each carrying the same verified organization identity.

Coverage runs from a few names to hundreds, and further names can be added as additional Subject Alternative Names (SANs) when the need arises. One SSL Certificate and one automated lifecycle then cover the whole group. Explore Multi Domain Coverage 🔗

Get Pre-Validated Before You Start

Before you order Sectigo® CaaS OV + Multi Domain, you need a pre-validation reference, as the order cannot be submitted without one. The reference confirms that your organization has already been validated, so the organization checks are completed in advance rather than during each order. Learn About Getting Pre-Validated 🔗

A pre-validation reference stays valid for 398 days from activation and is reused across eligible orders in that time, which removes the repeated organization checks. It is tied to the brand range, so a Sectigo® reference is used with Sectigo® products. Trustico® handles the pre-validation, and you enter the reference on the order form.

Verified Organization Identity

With Domain Validation (DV), an SSL Certificate confirms only control of the domain. Organization Validation (OV) records your checked company details inside the SSL Certificate, applied across every secured name, where anyone can view them by inspecting it. It carries the most weight where sensitive data or payments are handled. Learn About Organization Validation (OV) 🔗

The Case for Certificate as a Service (CaaS) with Multiple Domains

Managing a multi-domain SSL Certificate by hand grows more awkward as the list of names changes. Each time it nears expiry, someone generates a Certificate Signing Request (CSR), completes validation for every name, downloads the files, and installs them on each server. Certificate as a Service (CaaS) automates all of that.

Note : Where no Automatic Certificate Management Environment (ACME) client can be run, the same SSL Certificate can be issued from your Certificate as a Service (CaaS) license in a browser using the hosted tool. Explore the Hosted Issuance Tool 🔗

When you order Sectigo® CaaS OV + Multi Domain, you are buying an SSL Certificate license for a set period. Throughout that period your ACME client reissues the SSL Certificate as it approaches expiry, so every name stays protected for the term with no manual work. Explore Certificate as a Service (CaaS) 🔗

When the license period nears its end, you can extend it without any reinstallation or reconfiguration across your servers. The extended validity is recognized automatically, with no need to generate new External Account Binding (EAB) credentials or change your automation. Learn About License Extensions 🔗

Multi Domain Validation with ACME

Sectigo® CaaS OV + Multi Domain uses the Automatic Certificate Management Environment (ACME) protocol to run the SSL Certificate lifecycle. An ACME client on your server handles validation, issuance, installation, and reissue for every name, authenticating with the Certificate Authority (CA) using External Account Binding (EAB) credentials from your Trustico® account.

Pre-validation covers your organization, so there are no organization checks at order time. Control of each name is still confirmed on its own, on every order and on most reissues, through Domain Control Validation (DCV).

For each name the client answers a challenge automatically, either by serving a token over HTTP or by publishing a Domain Name System (DNS) TXT record. Many clients complete the Domain Name System (DNS) method through integrations with providers such as Cloudflare, AWS Route 53, and DigitalOcean. Explore ACME Protocol Details 🔗

Because a name can be confirmed over Domain Name System (DNS), coverage extends to sites behind a firewall or on internal networks that are not publicly reachable. Names on different servers or run by different teams are validated independently.

Adding and Changing Names

You can add more names during the term by purchasing additional Subject Alternative Names (SANs). The price is pro-rata, based on the validity remaining on your license, so a name added later in the term costs less than one added near the start.

Each added name has its control confirmed and carries the same verified organization identity before it joins the SSL Certificate, while the existing names stay in place. Once the name is on your license, the automation includes it on the next reissue. Manage names in the Trustico® Tracking System 🔗

Every Domain Name Must Be Specified

A Multi Domain SSL Certificate secures exactly the names you enter, so each name you need covered must be listed. There are no free paired or alternate domains, so where you want both example.com and www.example.com, both must be entered.

This is deliberate rather than a limitation. The SSL Certificate is ordered for the specific names given, so it matches the environment it will be installed on. Learn About Domain Names Secured Free 🔗

Supported ACME Clients

Any major Automatic Certificate Management Environment (ACME) client works with Sectigo® CaaS OV + Multi Domain. Certbot handles multiple names on one request, while acme.sh suits scripted, scheduled reissue and offers a wide range of provider integrations.

For Kubernetes, cert-manager issues and reissues the SSL Certificate as a native cluster resource. Windows environments are covered by win-acme and Certify The Web for Microsoft Internet Information Services (IIS), while lego, dehydrated, and Posh-ACME cover Go, shell, and PowerShell setups. Find Out More About Supported ACME Clients 🔗

Tip : If your sites run on cPanel, the Trustico® Certificate as a Service (CaaS) cPanel Plugin brings automated SSL Certificate management into your hosting control panel, without the command line. It retrieves, installs, and reissues your SSL Certificates from within cPanel itself. Explore the Trustico® cPanel Plugin 🔗

These are not either-or choices. Your Certificate as a Service (CaaS) license allows unlimited SSL Certificate issuance for its domain names, and the same External Account Binding (EAB) credentials drive an ACME client, the cPanel Plugin, and the hosted issuance tool alike.

External Account Binding (EAB) Credentials

External Account Binding (EAB) links your ACME client to the Certificate Authority (CA). Trustico® creates a Key Identifier and an HMAC Key and sends them to you after purchase, and they are also available in your ordering account for a limited time. You provide them when you first set up the client.

The same External Account Binding (EAB) credentials can set up clients on different servers or environments, which helps where the same group of names is managed by more than one client across production, staging, and development. View Our External Account Binding (EAB) Credential Setup Guide 🔗

Encryption and Protocols

Sectigo® CaaS OV + Multi Domain uses a 2048-bit RSA key with 256-bit symmetric encryption, applied consistently to every name, over the Transport Layer Security (TLS) 1.2 and 1.3 protocols with SHA-256 hashing. Elliptic Curve Cryptography (ECC) keys are also supported for environments that benefit from smaller keys and faster handshakes. Compare Encryption Standards 🔗

Preparing for Shorter Validity Periods

Industry rules are reducing the maximum validity of an individual SSL Certificate in stages, to 200 days from March 2026, 100 days from March 2027, and 47 days from March 2029. For a multi-domain SSL Certificate covering many names, replacing it that often by hand is impractical.

Certificate as a Service (CaaS) handles each reissue automatically, so the change in validity makes little difference to you. Your pre-validation reference keeps the organization stage ready, and the automation takes care of domain control and installation. Explore Traditional and CaaS Compared 🔗

USD $1,000,000 Warranty

Every Sectigo® CaaS OV + Multi Domain SSL Certificate carries a USD $1,000,000 Relying Party Warranty covering the secured names, which provides financial cover in the unlikely event that the Certificate Authority (CA) issues the SSL Certificate in error. Reissues are unlimited across the license through the automation. Review Warranty Details 🔗

Sectigo® Site Seal

Your order includes a Sectigo® site seal that you can display across your secured sites to reassure visitors. It works well on payment, sign-up, and contact pages. Explore Trust Seals 🔗

Browser Compatibility

Each secured name is trusted by around 99.9% of web browsers, including Chrome, Firefox, Safari, and Edge, and by mobile devices on iOS and Android without any additional configuration. Understand Browser Compatibility 🔗

Unlimited Server Licenses

You can install the SSL Certificate on as many servers as you need at no extra cost. This matters when your names run on separate infrastructure, across web servers, application servers, load balancers, and container nodes. The same SSL Certificate and key are deployed to each server that serves a secured name.

Your SSL Certificate License

Your purchase is an SSL Certificate license for the term you choose, and a multiple year license fixes the current pricing for the whole term. Because an individual SSL Certificate has a maximum validity set by industry rules, the license is kept current by reissuing the SSL Certificate during the term.

Reissues are free and unlimited across the license, and the automation handles them for you. The secured names and the verified organization identity carry across each reissue, and while your pre-validation reference is valid the organization stage is reused. Manage your license in the Trustico® Tracking System 🔗

Who Should Use Sectigo® CaaS OV + Multi Domain

It fits a business that keeps several websites or a group of regional and brand domains together on one SSL Certificate, provisioned through infrastructure as code with tools such as Terraform, Ansible, and CloudFormation, with a verified identity behind each name.

It also suits agencies and hosting providers securing many client domains under one automated SSL Certificate, where a checked identity carries weight with the organizations they serve. Learn About the Partner Service 🔗

Other Options

If you do not need a verified organization identity, the Domain Validation (DV) version of this product secures the same names through the same automation, with domain checks only. Compare Sectigo® CaaS DV + Multi Domain 🔗

Choose From Our CaaS Products

Choose from our range of SSL Certificate products compatible with Trustico® Certificate as a Service (CaaS).

Certificate as a Service (CaaS) - Pricing

Trustico® Certificate as a Service (CaaS) provides automated SSL Certificate issuance through the Automated Certificate Management Environment (ACME) protocol. The table below shows the price for each Certificate as a Service (CaaS) product.

Product Name Supplier List Price Your Price
Trustico® CaaS DV Single Site 🔗
HK$877.00 HKD
HK$494.00 HKD Save 44%
Trustico® CaaS DV + Wildcard 🔗
HK$4,382.00 HKD
HK$1,974.00 HKD Save 55%
Trustico® CaaS DV + Multi Domain 🔗
HK$876.50 HKD
HK$493.50 HKD Save 44%
Trustico® CaaS DV + Wildcard + Multi Domain 🔗
HK$4,381.50 HKD
HK$1,974.00 HKD Save 55%
Trustico® CaaS OV Single Site 🔗
HK$1,753.00 HKD
HK$987.00 HKD Save 44%
Trustico® CaaS OV + Wildcard 🔗
HK$7,711.00 HKD
HK$3,948.00 HKD Save 49%
Trustico® CaaS OV + Multi Domain 🔗
HK$1,752.50 HKD
HK$987.00 HKD Save 44%
Trustico® CaaS OV + Wildcard + Multi Domain 🔗
HK$7,711.00 HKD
HK$3,948.00 HKD Save 49%
Sectigo® CaaS DV Single Site 🔗
HK$797.00 HKD
HK$578.00 HKD Save 27%
Sectigo® CaaS DV + Wildcard 🔗
HK$3,983.00 HKD
HK$2,309.00 HKD Save 42%
Sectigo® CaaS DV + Multi Domain 🔗
HK$796.67 HKD
HK$577.33 HKD Save 28%
Sectigo® CaaS DV + Wildcard + Multi Domain 🔗
HK$3,983.00 HKD
HK$2,308.67 HKD Save 42%
Sectigo® CaaS OV Single Site 🔗
HK$1,594.00 HKD
HK$1,155.00 HKD Save 28%
Sectigo® CaaS OV + Wildcard 🔗
HK$7,010.00 HKD
HK$4,617.00 HKD Save 34%
Sectigo® CaaS OV + Multi Domain 🔗
HK$1,593.33 HKD
HK$1,154.33 HKD Save 28%
Sectigo® CaaS OV + Wildcard + Multi Domain 🔗
HK$7,010.00 HKD
HK$4,617.00 HKD Save 34%

*Multi-Domain SSL Certificate pricing is displayed per Subject Alternative Name (SAN). Each Multi-Domain product has its own minimum number of Subject Alternative Names (SANs) that are included or required to be purchased, and this minimum differs between products.

Sectigo® CaaS DV Single Site vs Wildcard Comparison

Certificate as a Service (CaaS) provides automated SSL Certificate management through APIs. Choose Single Site for individual domain automation, or Wildcard for comprehensive subdomain coverage with full API-driven SSL Certificate lifecycle management.

Feature Sectigo® CaaS DV Single Site Sectigo® CaaS DV + Wildcard
Service Type Certificate as a Service (CaaS) Certificate as a Service (CaaS)
Coverage Single Domain Only Unlimited Subdomains
Domains Covered www.example.com + example.com *.example.com + example.com
Automation Level Fully Automated Fully Automated
API Access Full RESTful API Full RESTful API
Validation Level Domain Validation (DV) Domain Validation (DV)
Validation Methods E-Mail / DNS / HTTP / HTTPS E-Mail / DNS / HTTP / HTTPS
Issuance Time Very Fast! Issued Within Minutes Very Fast! Issued Within Minutes
Auto-Renewal Automated Renewal Available Automated Renewal Available
Certificate Management Centralized Dashboard Centralized Dashboard
Integration Options API, Webhooks, SDK API, Webhooks, SDK
Ideal For SaaS Platforms, Single Domain Apps Multi-Tenant SaaS, Complex Infrastructures
Scalability Per-Domain Scaling Automatic Subdomain Coverage
Warranty $500,000 USD $500,000 USD
Encryption Strength 256-bit SSL Encryption 256-bit SSL Encryption
Browser Compatibility 99.9% Browser Trust 99.9% Browser Trust
Dual Domain Coverage Includes Root Domain SAN Free! Includes Root Domain SAN Free!
Reissues Unlimited Unlimited
Deployment Options Cloud, On-Premise, Hybrid Cloud, On-Premise, Hybrid
Information Page Product Information Page 🔗 Product Information Page 🔗
Your Trustico® Price HK$578.00 HKD HK$2,309.00 HKD
Purchase Options Instant - Buy Now 🔗 Instant - Buy Now 🔗

Most Popular Questions

Frequently asked questions covering the Sectigo® CaaS OV + Multi Domain SSL Certificate, its Subject Alternative Name coverage, the pre-validation reference requirement, per-name Domain Control Validation (DCV) and warranty.

Sectigo® CaaS OV + Multi Domain Explained

Sectigo® CaaS OV + Multi Domain is a multi-domain SSL Certificate delivered through Certificate as a Service (CaaS) with a verified organization identity. It secures a primary domain and a group of additional names as Subject Alternative Names (SANs), issued and reissued automatically by an ACME client.

Multiple Names on One SSL Certificate

One SSL Certificate holds several separate names through Subject Alternative Names (SANs), from a few names to hundreds, with more available as additional SANs. Every name you want covered must be entered, and there are no free paired or alternate domains on a multi-domain SSL Certificate.

The Pre-Validation Reference Requirement

Every CaaS OV order requires a pre-validation reference, and the order cannot be submitted without one. The reference confirms that your organization has already been validated, stays valid for 398 days, and is tied to the brand range, so a Sectigo® reference is used with Sectigo® products.

Domain Control for Each Name

Each name on the SSL Certificate has its control confirmed on its own, by serving a token over HTTP or by publishing a Domain Name System (DNS) record. Your ACME client completes this automatically on each order and most reissues, even where a pre-validation reference is in place.

Warranty and Server Licenses

Every Sectigo® CaaS OV + Multi Domain SSL Certificate carries a USD $1,000,000 Relying Party Warranty covering the secured names. You can install it on as many servers as you need at no extra cost, which suits names spread across separate infrastructure.