DigiCert Multi-Domain SSL: Review 2026
One certificate, up to 250 domains. OV validation. Per-domain add-on pricing with a notable asymmetry: standard domain additions and wildcard SAN additions are not priced the same, and mid-term additions are prorated to time remaining.
Standard vs. Wildcard SAN Pricing
At least one reseller's published pricing shows standard-domain additions and wildcard SAN additions at very different rates for this certificate. If any part of your domain plan includes subdomains, confirm whether structuring them as wildcard SANs changes your actual annual cost before building out a Multi-Domain order around standard entries.
Per-domain add-on rates at TheSSLStore
Verify this applies to your specific reseller and order before relying on it. Not every reseller publishes its add-on pricing the same way, and assuming the $0 wildcard SAN rate applies universally could affect your real cost calculation significantly.
What's Actually Included by Default
DigiCert does not publish a single universal default bundle size. It varies by reseller packaging, and the discrepancy is worth resolving before pricing additional domains. Two of three resellers checked agree once you read past the headline number; the third is genuinely less specific.
| Reseller | Stated default | Clarity |
|---|---|---|
| Certera | 4 domains (1 main + 3 additional SAN) | Clear |
| CheapSSLWeb | 4 domains (1 main + 3 additional SAN) | Clear |
| GeoCerts | "3 domains" (primary domain unclear) | Ambiguous |
Confirm the exact count, and whether it includes your primary domain, before assuming any published default applies to your order.
Generating the CSR for Multiple SANs
Setting up this certificate follows the same base OpenSSL flow as any OV certificate, with SANs specified upfront so the CA validates all of them in one request. Submit the CSR through your reseller's order form or DigiCert's CertCentral, complete OV business verification once, and the certificate covers every domain listed in the subjectAltName field.
openssl req -new -newkey rsa:2048 -nodes \
-keyout multidomain.key \
-out multidomain.csr \
-subj "/C=US/O=Example Inc/CN=example.com" \
-addext "subjectAltName=DNS:example.com,DNS:example.net,DNS:shop.example.com"Adding a domain after issuance means submitting a modification request through your management portal rather than regenerating the CSR from scratch. That is where the proration policy below actually matters.
Adding Domains After the Fact
At least one reseller states this plainly: domains added mid-term are prorated to the time remaining on the certificate, not billed at the full annual rate. Confirm this is how your specific reseller bills it; not every listing states its proration policy this clearly.
How proration works at the standard add-on rate ($158.81/yr per domain)
These figures are illustrative calculations based on the stated $158.81/yr add-on rate. Confirm your specific reseller's proration policy and rate before assuming these figures apply to your order.
What This Certificate Does Not Do
No subdomain wildcarding
Each SAN is a specific domain or subdomain you name explicitly. If your actual need is one domain plus unlimited subdomains, DigiCert's Wildcard certificate covers that structure directly. This product requires naming every subdomain individually.
No EV-level identity display
This is OV. At least one reseller's page for a related DigiCert product blends OV and EV language in the same paragraph. That is a description problem on that listing, not a feature of this certificate. Verify the validation level directly if a page reads that way.
No bundled security tooling
Vulnerability scanning, malware checks, and WAF are reserved for DigiCert's Secure Site and Secure Site Pro tiers. This base Multi-Domain product does not include them.
How It Compares
The alternatives below serve different needs or the same need at lower cost. Calculate your per-domain total, including add-ons past the default bundle, before comparing headline prices.
| DigiCert Multi-Domain SSL | Sectigo OV Multi-Domain | SSL.com OV Multi-Domain | |
|---|---|---|---|
| Validation | OV | OV | OV |
| Warranty | $1,000,000 | $1,000,000 | Comparable tier |
| Typical base price | $314 to $539.99/yr | $73.70 to $139.99/yr | Well below DigiCert |
| Per-domain add-on | $158.81/yr (standard) | Confirm per reseller | Confirm per reseller |
| Subdomain coverage | Named SANs only | Named SANs only | Named SANs only |
Reseller Pricing
The spread between CheapSSLSecurity and Certera is wide enough that pricing in per-domain add-ons past the default bundle could close or reverse the gap. Work out the total cost for your actual domain count before choosing a reseller based on headline price alone.
| Reseller | Base Price | Default Domains |
|---|---|---|
| CheapSSLSecurity | $314/yr | Confirm directly |
| TheSSLStore | Confirm directly | 3 SAN + $158.81/yr per additional standard domain |
| Certera | $539.99/yr | 4 domains (1 main + 3 SAN) |
Ideal Use Cases
Good fit
- Organizations running several related but distinct domains that want one certificate and one renewal date rather than managing separate certificates
- Buyers whose domain structure includes subdomains that can be structured as wildcard SANs, given the $0 wildcard SAN add-on rate documented above
- Deployments that are unlikely to change domain count mid-term, or that benefit from proration when they do
Look elsewhere
- Anyone whose real need is one domain plus unlimited subdomains. DigiCert's Wildcard certificate covers that structure without SAN-by-SAN naming.
- Cost-conscious multi-domain buyers. Sectigo OV Multi-Domain and SSL.com OV Multi-Domain deliver the same OV validation at a substantially lower base price.
- Buyers comparing headline prices without factoring in per-domain add-on costs past the default bundle
