Types of SSL certificates

SSL/TLS certificates are classified on two independent axes: validation level — Domain Validated (DV), Organisation Validated (OV) or Extended Validation (EV) — and coverage — single domain, wildcard or multi-domain (SAN). You pick one of each; the encryption strength is the same across all of them.

"SSL" is the old protocol name; browsers now use TLS, but products are still sold as SSL certificates. The history is in SSL vs TLS.

A single-domain certificate covers one name (usually with and without www), a wildcard covers every first-level subdomain of one domain, and a multi-domain (SAN) certificate lists several different names on one certificate. The hostname must match exactly, or browsers warn regardless of validation level.

• Single: example.in and www.example.in; not shop.example.in.
• Wildcard: *.example.in covers shop.example.in and mail.example.in, but not a.b.example.in or another domain. Details: wildcard SSL.
• Multi-domain / SAN: for example example.in, example.com and brand.co.in on one certificate with one renewal date. Details: multi-domain SSL.

Code signing certificates sign software you distribute; they do not secure websites and are a separate product.

List every hostname first to choose coverage, then choose validation by who needs to see your organisation's name. Most small business sites need only DV, and the free certificate included with hosting is DV.

1. Write down every hostname that must load securely: bare domain, www, and each subdomain.
2. One site → single-domain; many subdomains of one domain → wildcard; several different domains → multi-domain.
3. Stay on DV unless partners, tenders or policies require the organisation name (OV) or the strictest check (EV).
4. Confirm the install and renewal method — automatic for free certificates, reissue steps for paid ones.

A free Let's Encrypt DV certificate is enough when you need encryption and the padlock but no organisation name, warranty or vendor support. It uses the same TLS encryption as a paid DV certificate.

On WebJi® cPanel hosting, AutoSSL issues and renews it for hostnames pointing at the account; SSL/TLS Status shows each hostname's expiry. Let's Encrypt can issue wildcards through DNS validation, but AutoSSL normally works per hostname. The trade-offs are covered in free vs paid SSL, installation in install SSL in cPanel, and errors in SSL not working.