Sectigo OV

The CAB Forum has voted to update the maximum certificate lifetimes supported by browsers. This will impact all certificates that require to be trusted in browsers issued by any CA. The main push for these changes has come from Apple.

The advantage of shorter lifespans for certificates is the security improvements. It is likely to lead to the eventual removal of OCSP and much smaller CRLs both checks which can slow down browsers.

The proposed changes to certificate lifetimes are as follows

From today until March 15, 2026, the maximum lifetime for a TLS certificate is 398 days.
As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days. As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days. As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.

Ultimately this will lead to a major push to automate certificate issues. We already offer an API to allow for customers to automate the ordering and delivery of their HTTPS/TLS certificate. Some customers have integrated with the console to complete the automation process.

We are developing in partnership with our providers a process using the ACME protocol and we will be making this available to customers and resellers. The ACME protocol will allow for the complete automation of certificate issuance. This will be provided via a CaaS (Certificate as a Service) subscription.

Updates will be provided on how we will implement the CaaS and the options availabel to resellers.

Any certificates you purchase now will still remain valid and can be reissued until the end of the order expiry date. We will offer long term certificates the opportunity to transition to the CaaS model.

A CSR or Certificate Signing Request is required when ordering a HTTPS certificate. You can generate a CSR on your own server. The way to do this will depend on your server software or operating system. We provide some guides here.

You can also use our CSR generator available on the Servertastic Tools website.

Make sure you save the private key when the CSR is generated as nobody else will have a copy of this.

A multi-domain certificate (also known as an SAN certificate, short for Subject Alternative Name) lets you secure multiple websites with a single HTTPS/TLS certificate.

Unlike a wildcard certificate (which covers one domain and its subdomains), a multi-domain certificate can cover completely different domain names—like:

• yourbusiness.com

• yourbusiness.co.uk

• yourshop.net

• partnersite.org

You don’t need separate certificates for each site—just one to manage and renew.

Before the certificate can be issued you must be able confirm you have control of the domain. This is called Domain Control Validation. There are three options available to do this automatically.

Email Validation

During your order you are presented with a predefined list of email addresses. Select one of these email addresses and the system will send an email with an approver link. You must click this link and then “I approve” on the website.

The following addresses are available to choose from:

• admin@

• administrator@

• hostmaster@

• root@

• webmaster@

• postmaster@

File Authentication

This method is recommended as it is usually the easiest and fastest as you do not have to wait for DNS propagation or deal with email system delays.

You will then be given the name of a file and a secret random string. You should upload the file to the location and with the name specified. The file contents should contain nothing but the random string.

Once the order is completed you can delete the file.

DNS Authentication

You will need to be able to create a TXT or CNAME record for your domain. The details to enter into the TXT/CNAME record will be supplied as part of the order process.

When making changes to your DNS records it can sometimes take a few hours for the DNS changes to propagate even after adding the records.

An Organisation Validated (OV) certificate is a type of HTTPS/TLS certificate that does more than just secure your website—it also proves your business is real and trustworthy.

With an OV certificate, the Certificate Authority (CA) doesn’t just check that you own the domain—it also verifies your company’s legal name, registration, and physical location.

You’ll still get the padlock in the browser, just like with a basic certificate, but behind the scenes, users can view your verified business details. It’s a great way to boost trust—especially if you collect personal information, process payments, or work with other businesses.

When you buy an HTTPS/TLS certificate, it often comes with a warranty—but don’t worry, this isn’t something you need to register or pay extra for. It’s basically a promise from the certificate authority (CA) that if they ever issue a certificate incorrectly and it causes financial loss to your customers, the CA will cover the damages—up to a certain amount.

Think of it like a safety net. You’re not expected to need it, but it’s there to build trust and reassure your customers that your security is backed by more than just good intentions.

The amount of the warranty varies depending on the type of certificate—basic ones might offer $10,000, while high-assurance or EV (Extended Validation) certificates can come with $1,000,000 or more.

You will receive an order link which will allow you to manage your order. You can use this link to configure your order and manage all aspects of your order at anytime.

For HTTPS certificates you will need to supply a CSR which will be used to generate your public certificate. You must also prove control of the domain using either HTTPS, DNS or EMAIL.

If you’re looking for a trusted, affordable way to secure your website, Sectigo is a great choice. Here’s why thousands of businesses—including small and growing ones—stick with them:

Trusted by browsers worldwide
Sectigo (formerly Comodo) is one of the biggest names in online security. Their certificates are recognised by all major browsers, so your visitors get that reassuring padlock—and no scary warnings.

Options for every business
Whether you’re running a simple blog or a full-blown e-commerce store, Sectigo has a certificate that fits. From basic domain validation (DV) to full business-verified Extended Validation (EV), you can scale as your site grows.

Great value for money
Sectigo keeps things cost-effective, so you don’t need a huge IT budget to get strong encryption and brand protection. It’s high-assurance security without the high-end price tag.

Warranty included
Every Sectigo certificate comes with a warranty (up to $1.75 million depending on the type), giving you extra peace of mind in case anything goes wrong on their end.

Flexible features
Need a wildcard certificate for subdomains? Multi-domain support? Easy integration with your server or hosting platform? Sectigo has you covered.

Helpful support
Sectigo offers dedicated support and resources—and when you buy through us, we’ll help you choose, install, and renew your certificate with zero stress.