Multi-domain SSL certificates can be a good value when buying several domains, but many people are confused about the cost. This tutorial will show you how to choose the right domains and when to install multi-domain SSL instead of a different option.
Multi-domain SSL is cheaper only if you want to buy 3 or more .com SSL certificates. Single certificates may be easier and cost less for just a couple of domains.
If you’re using subdomains primarily under one domain, then you should opt for wildcard SSL. See your total cost for your specific number of domains at purchase first.
What Is a Multi-Domain SSL Certificate?
Multi-Domain SSL, also known as a SAN certificate, is a single certificate that is used to secure multiple different domains and/or hostnames. All the domain names you wish to secure are specified as Subject Alternative Names (SAN).
All such domains have the same certificate, certificate private key, and certificate validation. As opposed to having a certificate for one domain only and having a wildcard certificate for all subdomains belonging to one domain.
How Multi-Domain SSL Pricing Actually Works
Multi-domain SSL pricing most often begins with an entry-level SSL charge for the first domain and then charges for every additional domain (SAN) after that. The more domains you add, the higher the resulting cost will be. A higher validation level corresponds to a higher price; Domain Validated (DV) certificates are cheaper as compared to Organisation Validated (OV) & Extended Validation (EV) certificates. Another factor that is important is the brand; certain companies will have a higher charge for the same guarantees. You can get discounts on volume purchases, wherein after a certain level of domains, the cost for each domain falls. For their domain count, always check the price for a specific amount of domains.
How Many Domains Does It Take To Purchase Multi Domain SSL?
Before you make a price comparison, list all of the domains you currently own and all of the ones you are going to launch in the next 12-18 months. This small step eliminates the uncertainty and overpurchase.
Only use multi-domain SSL for three or more different domains. The idea behind multiple domains on one certificate isn’t worth the increased expense or management.
If any Domains are SubDomains of a single Domain, then check whether you have any. If you need the majority of your requirements as subdomains (such as shop.example.com and blog.example.com), it will typically be cheaper and simpler to handle; you’ll obtain a wildcard certificate.
The vast majority of the time, you’ll find that the more domains you purchase simply because you have “some extra” for “just in case,” do little to provide you with any actual value. Even if you don’t use any domains, they continue to add to the certification cost and renewals, so use only the domains that you know you need.
Multi-Domain SSL Certificate Cost by Domain Count
Multi-domain SSL charges are based on a simple pricing strategy: base pricing for the first Domain Name System (DNS) name, then a fee for each additional DNS name.
This is Certera’s actual pricing for a Domain Validated multi-domain SSL certificate (1-year plan). The base price is $19.99 per year and covers 1 main domain plus 2 additional SANs. Extra domains cost $6.99 per domain.
- 1 to 3 domains cost $19.99
- 4 domains cost $26.98
- 5 domains cost $33.97
- 10 domains cost $68.92
The first three domains are covered by the base price. After that, the cost of adding a domain is constant. You can add extra domains for just $6.99, whether moving from 4 to 5 domains or from 9 to 10 domains.
Certificate brand and type of validation determine price changes. Organisation certificates and Extended Validation certificates typically cost more per domain than Domain Validation. Get quotes only for the specific number of domains you will be using from the provider you plan to use.
A Multi Domain SSL Certificate isn’t the best option.
If you’re hosting only one or two domains, then skip multi-domain SSL. In these situations, it is simpler, cheaper, and easier to manage single-domain certificates.
A wildcard certificate is typically more appropriate when most of your names are subdomain names of your parent domain. You do not have to pay for single domains that a single wildcard can serve.
If the domains belong to different organizations or require independent certificate management, separate certificates may provide better control. A Multi-Domain SSL certificate may still be possible when the CA’s validation and authorization requirements are met. All domains are bound to the same validation process, which is problematic when different ownership and/or requirements.
Also, multi-domain SSL increases the number of changes to be made frequently, and this makes it a bad choice. New and deleted domains must be issued again, costing time and risking downtime. These are best when using separate certificates.
Also Read: What are Wildcard Subdomains? How to Create a Wildcard Subdomains?
Multi-Domain SSL vs Wildcard vs Separate Certificates: Quick Cost Comparison
A multi-domain SSL is typically easier and more efficient than managing three individual SSLs for three different domains. In the above example, three domains cost $19.99 on one certificate, and every extra domain adds just $6.99. With single-domain certificates, you would have to buy, validate, install and renew each one separately. One certificate means one CSR, one validation and one renewal date. Entry-level single-domain DV certificates can cost less per domain, so compare both options for your domain count before you buy.
A wildcard is preferred with 5 subdomains of 1 particular root domain. You can expect a typical wildcard to start around $150-$200 on the less expensive end, and offer you unlimited subdomains. Multi-domain SSL for the five names would be an expensive option, and would have to be listed individually.
Care must be taken with math in a mixed setting. Multi-domain may be more advantageous if you own one primary domain and have several random unrelated domains. Most of the names are subdomains of a single domain; then it is usually cheaper and easier to go with the wildcard. Separate certificates are only useful if the owners of the domains change or if there are different owners.
Conclusion
The multi-domain SSL is quite affordable, mainly because of the requirement to support 3+ different domains. Get the 100% price of your domains before purchase. Consider the certificate that meets your requirements instead of the largest number of domains a provider supplies.
Frequently Asked Questions (FAQs)
1. When purchasing multi-domain SSL, how many domains will I be able to add?
Most providers will allow you to purchase a multi-domain SSL certificate and add 100+ domains or more to it. The number of practical limits will vary according to the product and the type of validation selected. Generally, Domain Validation will let you put in higher numbers than Organisation or Extended Validation certificates. Before each purchase, always enquire about the exact limit from the provider.
2. Do you have to pay less for a multi-domain SSL certificate as compared to several separate certificates?
Yes, multi-domain SSL is most often lower cost if you need to secure 3 or more domains. You don’t have to purchase individual single-domain certificates for each one, so it does increase your total purchasing price but is still cheaper. Often, separate certificates are easier and cheaper for one or two domains.
3. Will it be possible to add a domain to a multi-domain SSL certificate after it has been created?
It is true that some providers will allow you to reissue a domain later and add additional domains. You input the new domain, fill in the required domain validation and get a new certificate. Further charges may apply to each additional domain after the initial purchase.
4. Can multiple domains on an SSL certificate include subdomains too?
If such an explicit Subject Alternative Name is not listed, a multi-domain SSL certificate does not include a subdomain. Does not always offer protection for subdomains of a domain. Generally, a wildcard certificate is more suitable for those requiring wide coverage across subdomains.
5. What if I add/remove a domain on an SSL Certificate with multiple domains?
It is required that the certificate be re-issued without the domain to be removed. The domain coverage is removed automatically when the domain has been removed. The rest of the domains on the certificate continue to work as normal.
