TLS/SSL Certificate Pricelist

Buying a website security certificate? There are 100s of options. Our simplified retail pricelist is below. We've featured useful certificate options for our S-M business clientele.

Read the notes on this page, About Certificates and our main website to understand what's what. We have demystified TLS/SSL certificates as best we can. Our supplier The SSL Store has been very patient with our questions, and generous in placing a small hosting service in their Platinum partner bracket. That means big discounts for us to pass on to you.

About the pricelist

We've shown mid range certificates here from well known brands. These all offer excellent browser & mobile compatibility. None claims 100% compatibility. They all use similar encryption technology. Some certificates are better regarded and perhaps more robust with a shorter chain of intermediary steps.

All prices are ex GST & subject to any substantial changes in our supplier's wholesale prices. They include:

  • free installation to websites on our server;
  • for multi year products, installation of a new certificate each year.

Prices do NOT include:

  • adding any associated trust seal to your website (small additional fee applies);
  • re-installing a Multi/Flex certificate if you decide to add more domains to it mid term; or
  • adding, or monitoring reports from, any virus/malware scans and checks that come bundled with some security certificates. More on this below (Differences).

We have shown only 1 and 2 year subscription prices because of the uncertain state of the world, including the Internet. We assume most clients prefer a short term commitment. But there are 3, 4, 5 and even 6 year subscription plans, with savings on per-year costs. Contact us if you are interested.

There is no need to secure both www.and non www. versions of your domains. Buy a certificate for the www. version only. Our hosting settings will automatically redirect to This setup reduces costs for Multi or Flex products and it helps search engine optimisation.

Do you have several domains that forward to one website? We'll try to set up your webhosting so that the forwarding domains don't need a security certificate; only your website domain name. There is nothing to encrypt when forwarding, so why need a certificate? But the trick is to convince the browsers of that.

Expand your vocab

Certificates are either:

  1. Single = secures 1 domain or subdomain;
  2. Flex = secures 1 domain or subdomain for the base price; or
  3. Multi domain = secures (usually) 3 domains or subdomains for the base price.

With a Flex or Multi domain product, you can also add extra domains/subdomains (SANs) at time of purchase for the 'extra SAN' price shown in the pricelist. There is a limit to how many SANs per certificate, but we don't expect any of our clients to exceed it; it's 100 or 250 SANs for certificates listed here.

You can also add an extra SAN to your certificate later, but that will incur a certificate re-installation fee. That's because we would have to remove and then re-install the certificate onto all the SANs.

SAN means something akin to 'a domain or subdomain'. These are all SANs:

A trust seal or site seal is a small image that can be placed on your website to remind site users that it's secured by your chosen brand of certificate.

Dynamic site seals can be clicked on to display important security details; static seals are... static. They're called trust seals because they can increase visitor trust in your website. Eg a well placed dynamic site seal on your payment page can noticeably reduce the number of abandoned shopping carts.

TLS/SSL Certificate Pricelist ex GST
Product Name
Trust Seal
1 Year Price
2 Year Price
Sectigo SSL

Thawte SSL123
$100 + $85 per extra SAN
$195 + $165 per extra SAN

GeoTrust DV SSL
$125 + $100 per extra SAN
$195 + $165 per extra SAN

Comodo Elite SSL

Sectigo SSL

GeoTrust TrueBusiness ID
Dynamic $190

Thawte OV SSL Web Server
$175 + $160 per extra SAN
$340 + $310 per extra SAN
Secures 1 for base price
GeoTrust TrueBusiness ID OV
Dynamic $500 + $80 per extra SAN
$900 + $150 per extra SAN
Secures up to 5 for base price
GeoTrust TrueBusiness ID
Dynamic $340

Digicert Basic EV
Dynamic $440

Thawte EV SSL Web Server
$250 + $200 per extra SAN
$480 + $340 per extra SAN
Secures 1 for base price
Digicert Basic EV EV
$440 + $250 per extra SAN
$800 + $420 per extra SAN

GeoTrust TrueBusiness ID EV
$715 + $95 per extra SAN
$1300 + $180 per extra SAN
Secures up to 5 for base price


  • Do you have only one website, maybe with other domains that forward to it?

    Look at Single and Flex certificates and Thawte SSL Web Server EV:

    1. Do you want a site seal on your website?
    2. Do you want DV, OV or EV (see below)?
    3. Select a certificate and contact us with your order.
  • Do you have > 1 website?

    Look at Flex & Multi product options. For just 2 sites, also compare the cost of buying 2 Single certificates:

    1. Do you want a site seal on your website?
    2. Do you want DV, OV or EV (see below)?
    3. Do some arithmetic, select a certificate and send us your order.

    The main differences between Flex & Multi Domain are:

    • You can start out with just 1 or 2 domains on a Flex certificate.
    • Most multi products are designed for multiple domains/subdomains to be specified at time of purchase. (Thawte SSL is an exception.)
    • A Flex certificate can include some wildcard SANs (for a higher cost) and some not. A wildcard covers every possible subdomain name.
      We haven't included wildcard options in our pricelist, because we can't think of any clients who need it and because there is a security weakness. You could secure a phishing website unawares.


What if you make a mistake in your order? We know all the websites on our server. We'll notice if there is anything strange about your order and we'll ensure the right domains are secured for you.

Do you need to cover more than one IP address (eg you have a website hosted with us and you want to secure your own mail server for on another IP)? This can be done with a Multi Domain or Flex certificate, but it is more secure to use a separate TLS/SSL certificate for each server.

If your business is likely to change its website name, business name or contact details: it's safer to choose a 1 year certificate, not 2 year. Then update details for the next certificate order. If your business changes will happen soon: it makes sense to buy a commercial certificate after that update. (However, we can't guarantee that our prices will remain as they are now.) Remember you have until 30th September before Let's Encrypt is no longer supported by certain platforms; your current LE certificate should work fine until then.

If you can't see what you want: ask us. There are many more options.

Worst case scenario: your certificate turns out to be less than desired, eg some key mobile phones or browsers won't accept it. Let us know asap. We have a 30 day money back guarantee from our supplier, so we can quickly swap it for another product. You will need to cover any additional costs.


  • Some certificates are faster and more reliable, eg they work on more platforms than others. Hard data is hard to get. We have tested a few certificates on our own sites.
  • A dynamic site seal (trust seal) has bigger impact than a static one. To make the most of your site seal, see our main website.
  • Some certificate products include extras that help with PCI or similar compliance.
  • Some give the option of free daily malware/vulnerability scans of your website. Given the security on our server, these are of uncertain value. They can slow down your website and other websites on our server. They could also conflict with other software on your website, or duplicate anti malware products on our web server. They may only be available free for a limited time.
    If you are interested in this, talk with us before you select a certificate.
    We may charge a fee to install the programs and get them working on your website.
  • For a 'multi year' product: the TLS/SSL certificate is re-issued by the CA and re-installed by SuttonNet each year. This ensures the most up-to-date security. You would get the same updated security by re-ordering a 1 year certificate at the end of each year, but at a higher cost.
  • Every SSL certificate only lasts one year. It's more secure that way. By buying a 2 year or longer subscription, you don't get one longlived certificate. Rather, you get a series of one-year certificates to be installed on your website each year. Each new certificate will have up to date technology & the necessary validation checks done.

How to order

Email us with:

  1. domain name(s) to be secured
  2. product name
  3. certificate level (DV, OV, EV)
  4. Single/Multi Domain/Flex (the product name doesn't always differentiate these)
  5. no of years
  6. whether you want us to install a site seal on your website (option available for SuttonNet-built sites only).

Allow some lead time when ordering certificates. We need to arrange currency transfer to US$, order through our supplier, guide you through OV/EV verification (if needed) and install the certificate keys on your website.

For an OV or EV certificate, it takes c 1- 5 days for a Certificate Authority (CA) to verify your business/organisation. You supply identifying data (eg physical street address, website with contact details, ABN, DUNS (Dun & Bradstreet) number). The CA checks multiple public records and will ring you to help confirm that your organisation is genuine.

All your business/organisation's records must match perfectly, otherwise the OV/EV verification might fail or be delayed. Digicert offers fast tracked OV/EV verification in 24 hours on some certificates; you need to have the right documentation ready.

Check it out

If you are comparing with other SSL/TLS certificate prices online, bear in mind:

  • prices are usually in US$;
  • cheapest certificates often have weaknesses, eg they are not recognised by all platforms & especially not on mobile phones (you could be worse off in that respect than with the free Let's Encrypt certificate you are replacing);
  • it might not be clear from a certificate's name whether it is DV, OV or EV;
  • there should be support to navigate the OV/EV validation process; and
  • you'll need to pay us to install certificate bought from a third party supplier (and to re-install 'multi year' certificates each year).

Long term

Like a domain name, a commercial SSL certificate needs to be re-purchased near its expiry date. You needn't to stay with the same brand, but for an OV/EV re-order this can speed up the verification process.

Our supplier offers big specials to its resellers. We can't guarantee that the same specials will be in force when you re-purchase your certificate in a year or more.

We would expect that LE will become accepted on more platforms over time. If that happens, you could wait until your paid certificate expires and then revert to LE again. We charge a one-off LE certificate installation fee.

Due to other (integrity related) problems with Let's Encrypt, we might decide not to use it at all on our server in future. This is not a decision we would make without advance notice to clients & without further research.

Last updated 16 February 2021