Is there a difference between free and paid SSL?

Not in encryption: both create an equally strong connection and show the same padlock in the browser. Paid certificates include a warranty and support from the certificate authority, and the OV and EV options also verify your company's identity. On hosting that installs and renews Let's Encrypt automatically, a free certificate is enough for most sites.

Does an SSL certificate protect my site from being hacked?

No. SSL encrypts the connection between the visitor and the server; it doesn't protect against a vulnerability on the site, a weak password or an outdated plugin. Protecting against attacks takes updates, a web application firewall (WAF) and regular malware scanning.

Does a Wildcard SSL cover the main domain and deeper subdomains?

A Wildcard certificate covers all subdomains at the *.example.com level, and Positive SSL Wildcard also protects the main domain (example.com). It doesn't cover second-level subdomains such as a.b.example.com; those need a separate certificate or a separate Wildcard for that level.

If I buy a multi-year SSL, do I have to reinstall the certificate every year?

Because certificates are now valid for at most 200 days, a multi-year plan has the certificate reissued and reinstalled several times during the term; you pay only once. If your hosting panel installs certificates automatically, there's nothing for you to do; otherwise you install the new certificate on your server.

Which SSL Certificate Do I Need? (DV, OV, EV and Wildcard Explained)

October 25, 2026 · 5 min read

Every site needs an SSL certificate to get rid of the browser's "Not secure" warning, but when you shop for one you'll find free Let's Encrypt, DV, Wildcard, OV and EV options, with prices ranging from a few dollars to several hundred. The good news: the encryption is equally strong in every type. What differs is what the issuing authority verifies and how many addresses the certificate covers. In this guide we compare the types and help you pick the right one for your site with four questions.

Types of SSL Certificates

Free DV (Let's Encrypt): Verifies only that you control the domain. It's valid for 90 days and renewed automatically by the hosting panel. It's enough for most business sites, blogs and small online stores.
Paid DV: Validation still covers only the domain, and the certificate is issued within minutes. It includes the certificate authority's warranty and support, and it's preferred on servers where Let's Encrypt can't be installed automatically or when you want to buy for several years.
Wildcard: Covers one level of subdomains in the form *.example.com with a single certificate: blog.example.com, panel.example.com, shop.example.com. It simplifies things when you have many subdomains or they change often.
OV (organization validated): Besides the domain, the company's official registration is verified, and the company name appears in the certificate details. Issuance takes one to two business days.
EV (extended validation): The company's legal existence, address and authorized contact are verified in the most detail. Browsers no longer highlight EV in the address bar; as with OV, the company details appear in the certificate information.

Comparison: What Gets Verified and How Long It Takes

Type	Verified	Issuance time	Suitable for
Free DV (Let's Encrypt)	Domain	Minutes	Business sites, blogs, small stores
Paid DV	Domain	Minutes	Servers where the panel can't install certificates automatically, those who want a warranty
Wildcard (DV)	Domain and one level of subdomains	Minutes	Projects and SaaS apps with many subdomains
OV	Domain and company registration	1–2 business days	Online stores, business sites, companies that want to reassure partners
EV	Domain, company, address and authorized contact	1–5 business days	Banks, large stores, organizations whose contracts require EV
zuwinasa cloud	Let's Encrypt free with hosting; Positive SSL and Wildcard from the member panel, InstantSSL (OV) and EV with our team	DV within 10 minutes	All of the above, with 1- to 5-year terms

Which One Should You Choose? Decide in 4 Questions

1. Does Your Site Have to Prove Who You Are?

The encryption is the same for every type, and so is the padlock visitors see. If your site is a blog, a brochure site or a small store, DV is enough. If a tender, a bank or a business partner requires your company identity to be verified, choose OV; if a contract explicitly says EV, choose EV.

2. How Many Domains and Subdomains Will You Protect?

For just example.com and www.example.com, a standard DV certificate is enough. If you have several subdomains, a Wildcard covers them all with one certificate. A Wildcard covers only one level: *.example.com doesn't protect a.b.example.com. Different domains (such as example.com and example.net) need separate certificates.

3. Are You Ready for Company Validation?

For OV and EV, the certificate authority checks your company registration, phone number and address against independent sources; if the details don't match, it takes longer. Before you apply, make sure your company name, address and phone number are written the same way in official records and on your website.

4. Who Will Install and Renew the Certificate?

Since March 15, 2026, certificates have been valid for at most 200 days, and this will drop step by step to 47 days by 2029. Even if you buy a multi-year plan, the certificate is reissued and reinstalled several times during the term. That's why an environment that installs and renews certificates automatically matters as much as the certificate type.

Note: If you still see a warning in the address bar after installing the certificate, the cause is usually mixed content: the page loads an image or script from an http:// address. Change those addresses to https:// and permanently (301) redirect all http requests to https.

SSL at zuwinasa cloud

Our Web Hosting and WordPress hosting plans include a free Let's Encrypt certificate, which Plesk installs and renews before it expires. If you want a paid certificate, our SSL Certificates page lists Sectigo's Positive SSL, Positive SSL Wildcard, InstantSSL (OV) and EV SSL with terms from 1 to 5 years. You order Positive SSL and Wildcard from the member panel: the CSR is created in the panel and validation is done with a DNS record; if your hosting is with us, the certificate is installed on your site, otherwise you download it from the panel and install it on your own server. For OV and EV, you go through company validation together with our team.

SSL encrypts the connection but doesn't protect your site from attacks. For malware scanning and a firewall, see our Website Security service.