Every SSL/TLS certificate encrypts traffic equally well. What differs is how thoroughly the certificate authority (CA) checked who you are, and which names the certificate covers. Choosing the right type avoids paying for features you do not need, or missing coverage you do.
Before you start
- Know which hostnames you need to secure:
example.com,www.example.com, subdomains such asshop.example.com, and any other domains. - Remember that MdmHost already provides free domain-validated certificates through AutoSSL for every domain on your hosting.
Validation levels
| Type | What the CA checks | Issued in | Typical use |
|---|---|---|---|
| DV (Domain Validated) | That you control the domain (by DNS, file or email) | Minutes | Blogs, business sites, most shops |
| OV (Organisation Validated) | Domain control plus that your organisation legally exists | 1–3 days | Companies wanting their name in the certificate details |
| EV (Extended Validation) | A stricter check of the organisation, its address and the requester | Several days | Banks, large brands with compliance requirements |
Browsers show the same padlock for all three. EV certificates used to show a green company name in the address bar, but modern browsers removed that, so the visible difference is now only in the certificate details. For most websites a DV certificate is the right choice.
Coverage types
Single-domain
Covers one hostname, usually with the www variant included, for example example.com and www.example.com.
Wildcard
Covers a domain and all its first-level subdomains with *.example.com: shop.example.com, mail.example.com and so on. It does not cover deeper levels such as a.b.example.com. Wildcards need DNS validation and are useful when you create subdomains often.
Multi-domain (SAN or UCC)
Lists several different names in one certificate, for example example.com, example.net and shop.example.org. AutoSSL certificates on cPanel are effectively multi-domain: one certificate covers a domain and its related names such as www, mail and cpanel subdomains.
Free versus paid
- Free (AutoSSL, Let's Encrypt): DV only, short validity (renewed automatically), trusted by all modern browsers. Ideal for nearly all websites on MdmHost.
- Paid: needed for OV or EV, sometimes preferred for a longer manual renewal cycle, a warranty or a specific CA required by a partner or payment provider.
Encryption strength is the same. A paid DV certificate does not make your site more secure than a free one.
How to choose
- Normal website or shop on MdmHost: use the free AutoSSL certificate.
- Company policy or a contract requires a verified organisation: buy OV.
- Regulated industry that demands EV: buy EV.
- Many subdomains created dynamically, such as a multisite network: consider a wildcard.
- Several unrelated domains on a server or appliance that accepts only one certificate: consider a multi-domain certificate.
Certificate validity
Publicly trusted certificates have a limited lifetime, and the industry is steadily reducing the maximum period. Plan for renewals: automatic renewal (AutoSSL) removes the risk entirely, while paid certificates need you to reissue and reinstall them before expiry.
Frequently asked questions
Does SSL type affect Google rankings?
Google uses HTTPS as a ranking signal but does not prefer OV or EV over DV.
Can I use a paid and a free certificate on the same domain?
Only one certificate is active per hostname at a time. If you install a paid certificate, AutoSSL leaves it alone while it is valid.