DV
Domain validation
from€5.00per year, excluding VAT
Paid domain validation from a named issuer, with a warranty and a support line behind the renewal.
- 24 certificates to choose from
- 18 cover wildcard names
- Up to 100 extra names on one order
Certificates and HTTPS
Secure every service, your way
Use managed HTTPS for a supported VPSnet application, connect Automatic SSL to any compatible ACME client, or buy a portable certificate for your website, proxy, mail server, API, load balancer, or other SSL service.
What it costs
Published certificate prices
Prices come from the current public catalog. The exact EUR total is confirmed before payment.
OV
Organization validation
from€29.33per year, excluding VAT
Everything domain validation does, plus your verified company name and address inside the certificate.
- 26 certificates to choose from
- 17 cover wildcard names
- Up to 100 extra names on one order
EV
Extended validation
from€60.33per year, excluding VAT
The deepest identity review a certificate authority performs. Buy it when a document names it.
- 15 certificates to choose from
- No wildcard: no issuer sells one
- Up to 100 extra names on one order
Choose the right path
Available certificate paths
Choose a path below. Paid Automatic SSL and portable certificate routes appear only when a published offer is available.
Managed application HTTPS
Included with the application
Publish a supported VPSnet application through its Access settings. We prepare the route, obtain the certificate, and renew it without asking you to handle certificate files.
- Works with supported managed-application routes and their configured hostnames.
- The platform keeps the private key and renewal workflow outside the application container.
Automatic SSL subscription
From €15.99 per year
Subscribe DNS names, connect the private ACME server URL and EAB credentials to your client, and let it issue and renew short-lived certificates throughout the paid term.
- Works with compatible servers on VPSnet or another provider, including Certbot, acme.sh, Caddy, cert-manager, and win-acme.
- The private key and certificate request stay on your system; one subscription can serve the subscribed names on multiple servers.
Portable paid certificates
From €5.00 per year
Buy a certificate as an account product, keep the private key in your own system, and install the issued public certificate chain wherever you control SSL.
- Use it on your own website, reverse proxy, load balancer, mail server, API, or another SSL-capable service.
- See the exact final EUR price before payment, then follow validation, issuance, renewal, and reissue in one place.
Guided choice
Three questions and we'll pick for you
Tell us where it runs and what it has to cover. We'll show the one we'd choose, and why.
The full price list
Every certificate we sell, with what it covers
Every certificate here is sold by VPSnet and issued by a public certificate authority. Prices are per year, excluding VAT; the panel confirms the exact total before payment.
DV
VPSnet Domain SSL
€5.00per year, excluding VAT
- 60-month term, €24.99
- One hostname
- Sold by: VPSnet
DV
Sectigo PositiveSSL
€6.75per year, excluding VAT
- 48-month term, €26.99
- One hostname
- Hostname or public IP
- Sold by: Sectigo
DV
RapidSSL Standard
€12.33per year, excluding VAT
- 36-month term, €36.99
- One hostname
- Sold by: RapidSSL
DV
Sectigo Essential SSL
€14.20per year, excluding VAT
- 60-month term, €70.99
- One hostname
- Sold by: Sectigo
DVWildcard
VPSnet Multi-Domain SSL
€15.00per year, excluding VAT
- 60-month term, €74.99
- Up to 100 extra names
- €24.99 per extra name
- Hostname or public IP
- Sold by: VPSnet
DVWildcard
VPSnet Public IP SAN
€15.00per year, excluding VAT
- 60-month term, €74.99
- Up to 100 extra names
- €24.99 per extra name
- Hostname or public IP
- Sold by: VPSnet
DVWildcard
Sectigo PositiveSSL Multi-Domain
€17.20per year, excluding VAT
- 60-month term, €85.99
- Up to 100 extra names
- €52.99 per extra name
- Hostname or public IP
- Sold by: Sectigo
DVWildcard
VPSnet Secure Domain SSL
€20.60per year, excluding VAT
- 60-month term, €102.99
- Up to 100 extra names
- €24.99 per extra name
- Hostname or public IP
- Sold by: VPSnet
OV
VPSnet BusinessTrust
€29.33per year, excluding VAT
- 36-month term, €87.99
- One hostname
- Hostname or public IP
- Sold by: VPSnet
Identity assurance
DV, OV, EV: what actually gets checked
All three encrypt the same way and produce the same padlock. The only difference is how much of you the issuer verified first.
DV
Domain validation
- One thing gets checked: that you control the name. You prove it with a DNS record, a file on the server, or an email to an administrative address at that domain.
- Visitors see the padlock and get full encryption - identical to every other type.
- Right for websites, shops, APIs, staging, mail servers. Nearly everything.
- Automatic - issued as soon as the check passes.
OV
Organization validation
- Domain control, plus your organization. The issuer confirms your legal name, address and that the business is real, through public registries and a callback.
- Same padlock. The difference is inside: open the certificate details and your verified company name is there.
- Worth it when people deliberately inspect the certificate, or when a customer's security policy asks for a named legal entity.
- A person reviews it, so it isn't instant.
EV
Extended validation
- The deepest review of the three: legal existence, operational presence, physical address, signing authority, and a verified phone call.
- Also the same padlock. The green bar with the company name is gone from every major browser.
- Buy it when a contract, tender or auditor names it. Otherwise the extra money buys paperwork, not visible trust.
- The most involved check, so it takes the longest.
What a name covers
The wildcard trap, in one table
A wildcard does not cover the bare domain, and it stops after one level. Read the row you need before you order.
| Name you want to cover | www.example.comSingle domain | *.example.comWildcard | SANMulti-domain |
|---|---|---|---|
www.example.com | www.example.com: supported (Single domain) | www.example.com: supported (Wildcard) | www.example.com: supported (Multi-domain) |
example.com | example.com: not supported (Single domain) | example.com: not supported (Wildcard) | example.com: supported (Multi-domain) |
shop.example.com | shop.example.com: not supported (Single domain) | shop.example.com: supported (Wildcard) | shop.example.com: supported (Multi-domain) |
a.b.example.com | a.b.example.com: not supported (Single domain) | a.b.example.com: not supported (Wildcard) | a.b.example.com: supported (Multi-domain) |
example.lt | example.lt: not supported (Single domain) | example.lt: not supported (Wildcard) | example.lt: supported (Multi-domain) |
www.example.com- www.example.com: supported (Single domain)
example.com- example.com: not supported (Single domain)
shop.example.com- shop.example.com: not supported (Single domain)
a.b.example.com- a.b.example.com: not supported (Single domain)
example.lt- example.lt: not supported (Single domain)
www.example.com- www.example.com: supported (Wildcard)
example.com- example.com: not supported (Wildcard)
shop.example.com- shop.example.com: supported (Wildcard)
a.b.example.com- a.b.example.com: not supported (Wildcard)
example.lt- example.lt: not supported (Wildcard)
www.example.com- www.example.com: supported (Multi-domain)
example.com- example.com: supported (Multi-domain)
shop.example.com- shop.example.com: supported (Multi-domain)
a.b.example.com- a.b.example.com: supported (Multi-domain)
example.lt- example.lt: supported (Multi-domain)
Want the bare domain too? Pick a product that lets you add it as an extra name - the table shows which ones do.
On many products one of the extra names can itself be a wildcard - that is how you cover a bare domain and all its subdomains at once.
From order to installation
A clear certificate workflow
The panel guides the commercial and validation steps. You stay in control of the private key and the final server configuration.
- 1
Create the private key and CSR
Generate both in the system where the certificate will run. Submit only the CSR; your private key never needs to leave your device.
- 2
Choose coverage and review the price
Select the product, term, DNS names, and validation method. We show the exact current total in EUR before you pay.
- 3
Complete validation
Follow the DNS, file, email, or organization checks offered for that product. Progress stays visible in the certificate order.
- 4
Download and install
Download the issued public certificate and chain, install them beside your private key, and manage renewal or reissue from the same page.
Portable by design
One certificate, your choice of SSL stack
Install the issued public certificate chain beside your private key in the server, proxy, appliance, or service that terminates SSL.
- Nginx
- Apache HTTP Server
- lighttpd
- OpenLiteSpeed
- HAProxy
- Caddy
- Mail servers
- APIs and load balancers
- Other SSL-capable services
Ports 80 and 443
Plan the listener, not just the certificate
A certificate enables trusted SSL; it does not claim a network port. The public listener still needs a deliberate layout.
One public edge
Let Nginx, HAProxy, Caddy, or another edge proxy own ports 80 and 443, route by hostname and SNI, and send traffic to applications on internal ports.
Separate public IP addresses
Different services may each own ports 80 and 443 when they bind different IP addresses. This keeps their public listeners independent.
Platform proxy or your proxy
The VPSnet application proxy and your own web server cannot both bind the same IP and port. Use managed HTTPS for supported application routes, or make your own proxy the edge and install a portable certificate there.
Private-key safety
Your private key stays yours
Generate the key locally and submit the CSR. The customer certificate order neither needs nor accepts the private key, and certificate downloads contain only public certificate material.
Questions, answered
SSL certificates in practice
The important differences, installation choices, and network boundaries in plain language.
01Are certificates only for VPSnet applications?
No. Managed application HTTPS is one option. Automatic SSL subscriptions and portable certificate orders can both be used with compatible systems on VPSnet or another provider.
02How do managed HTTPS, Automatic SSL, and portable certificates differ?
Managed HTTPS handles the route and certificate for a supported application. Automatic SSL gives your ACME client credentials for continuous issue and renewal during a paid term. A portable DV, OV, or EV order gives you downloadable public certificate files for a private key and CSR that stay on your system.
03Is a paid certificate more secure than a free one?
No. The encryption is identical. What you buy is identity verification, a named issuer, a warranty, or automation with support.
04Does a wildcard cover example.com itself?
No. *.example.com covers one level of subdomains. Add the bare domain as an extra name on a product that allows extras.
05Can I get an EV wildcard?
Nobody issues one. The rules for extended validation require every name to be listed explicitly.
06Can I use a certificate on my own website or reverse proxy?
Yes. Portable certificates can be used with Nginx, Apache, lighttpd, OpenLiteSpeed, HAProxy, Caddy, mail servers, APIs, load balancers, and other compatible SSL services.
07Can two web servers both use ports 80 and 443?
Not on the same IP address at the same time. Use one edge reverse proxy to route hostnames to internal ports, give each listener a separate IP address, or keep only one public listener. A certificate does not reserve a port by itself.
08Why do I provide a CSR instead of a private key?
The CSR contains the public key and requested identity, so the certificate can be issued without exposing your private key. Generate the private key locally, protect it, and never paste it into the certificate order.
09Can I order a wildcard certificate?
Yes when a published product supports wildcard names. Wildcard issuance uses DNS validation, and the catalog shows the exact supported name type and validation choices before ordering.
10Can I use the certificate outside VPSnet?
Yes. The issued public certificate bundle is portable. Keep the matching private key and follow the configuration requirements of the server or service where you install it.
11How are certificate prices shown?
The published catalog and quote show customer prices in EUR. The exact current total is confirmed before payment and includes the selected term and additional DNS names.
Choose the certificate that fits your service
Compare current options, confirm the exact EUR price, and keep every order, validation step, download, and renewal together.
Open certificate management