Trustico® CaaS DV Single Site Information

Trustico® CaaS DV Single Site is a single-domain SSL Certificate delivered through Trustico® Certificate as a Service (CaaS), for teams that want to obtain and manage SSL Certificates programmatically rather than by hand. It is issued and reissued automatically through the Automatic Certificate Management Environment (ACME) protocol.

It suits teams provisioning SSL Certificates through continuous integration and deployment (CI/CD) pipelines, managing infrastructure as code, or building SSL Certificate issuance into automated deployment workflows, where manual steps are not practical.

When you order, you provide your domain without the www prefix, and Trustico® adds the www version as an additional name at no charge. Ordering yourdomain.com therefore covers both yourdomain.com and www.yourdomain.com, so your ACME client can request either name. Learn About Domain Names Secured Free 🔗

For names that would not normally use a www prefix, such as mail.yourdomain.com or ftp.yourdomain.com, the www version is not added automatically, though you can ask for it to be added. If you order www.yourdomain.com directly, only that name is issued.

Secures Domain + www Free of Charge 🔗 Instant Domain Control Validation 🔗
USD $500,000 Relying Party Warranty 🔗 2048-bit Industry Standard SSL Certificate
Programmatic Management Includes Hosted Issuance Tool 🔗
Includes Trustico® Site Seal 🔗 Unlimited Server Licenses
Optional Installation Service 🔗 Unlimited Reissue Policy 🔗
99.9% Web Browser Ubiquity 🔗 Extend the License Without Reinstallation

The sections below explain how Trustico® CaaS DV Single Site is issued, how the automation works, and how to put it in place.

The Case for Certificate as a Service (CaaS)

Traditional SSL Certificate management involves manual steps at every stage : generating a Certificate Signing Request (CSR), completing validation, downloading files, and installing them on each server. Certificate as a Service (CaaS) replaces those steps with automation that handles ordering, validation, issuance, and reissue for you.

Note : An Automatic Certificate Management Environment (ACME) client is not the only route. Your Certificate as a Service (CaaS) license can also issue an SSL Certificate directly in a browser, in four steps with nothing installed. Explore the Hosted Issuance Tool 🔗

When you order Trustico® CaaS DV Single Site, you are buying an SSL Certificate license for a set period. Throughout that period your ACME client reissues the SSL Certificate as it approaches expiry, extending the expiry date of the installed SSL Certificate against the validity remaining on your license. You order once and the domain stays protected for the term.

When the license period nears its end, you can extend it without any reinstallation or reconfiguration. The extended validity is recognized automatically, and there is no need to generate new External Account Binding (EAB) credentials or change your server. Learn About License Extensions 🔗

The Automated SSL Certificate Lifecycle

Trustico® CaaS DV Single Site uses the Automatic Certificate Management Environment (ACME) protocol to handle the SSL Certificate lifecycle. Your server runs an ACME client that talks to the Certificate Authority (CA), and it manages domain verification, issuance, and reissue without manual steps.

You install an ACME client and authenticate it once using External Account Binding (EAB) credentials from your Trustico® account. The client then proves control of the domain through an HTTP-01 challenge or a Domain Name System (DNS) challenge, and once the Certificate Authority (CA) confirms control, the SSL Certificate is issued and installed.

Before each expiry, the client repeats validation and fetches a reissued SSL Certificate, so protection continues without downtime. Explore ACME Protocol Details 🔗

Supported ACME Clients and Server Environments

Trustico® CaaS DV Single Site works with the major ACME clients, so you can use the tool that fits your setup. Certbot is common on Linux systems running Apache or Nginx, while win-acme and Certify The Web give native support on Windows and Microsoft Internet Information Services (IIS).

For containers, cert-manager integrates with Kubernetes, and acme.sh is a lightweight shell option for scripted deployments.

Further clients such as lego, dehydrated, and Posh-ACME cover Go, shell, and PowerShell environments. These clients deploy across Apache, Nginx, Microsoft Internet Information Services (IIS), cPanel, Plesk, Docker, Kubernetes, Caddy, and the major cloud platforms.

Whichever environment you run, the workflow is the same : authenticate with External Account Binding (EAB) credentials, complete the domain challenge, and receive your SSL Certificate. Find Out More About Supported ACME Clients 🔗

Tip : If your website runs on cPanel, the Trustico® Certificate as a Service (CaaS) cPanel Plugin brings automated SSL Certificate management directly into your hosting control panel, without the command line. It retrieves, installs, and reissues your SSL Certificates from within cPanel itself. Explore the Trustico® cPanel Plugin 🔗

On cPanel hosting, the plugin fills the role of the ACME client, so the same automation runs without any command line work.

These are not either-or choices. Your Certificate as a Service (CaaS) license allows unlimited SSL Certificate issuance for its domain names, and the same External Account Binding (EAB) credentials drive an ACME client, the cPanel Plugin, and the hosted issuance tool alike. More than one method can be in use at the same time, and you can move between them at any point during your license period.

External Account Binding Credentials

External Account Binding (EAB) links your ACME client to the Certificate Authority (CA). Trustico® creates a Key Identifier and an HMAC Key and sends them to you via e-mail after purchase, and they are also available in your ordering account for a limited time. You provide them when you first set up the client to authorize it.

Each set of External Account Binding (EAB) credentials can be managed separately, so you can hold different bindings for different servers, environments, or pipelines. That keeps clear track of which systems request SSL Certificates. View Our EAB Credential Setup Guide 🔗

Domain Validation

This SSL Certificate is issued through automated Domain Validation (DV) that usually completes within minutes. The ACME client answers a challenge from the Certificate Authority (CA) on your behalf. With an HTTP-01 challenge, the client places a verification file on your web server for the Certificate Authority (CA) to retrieve.

With a Domain Name System (DNS) challenge, the client creates a temporary Domain Name System (DNS) TXT record instead. That method suits servers behind a firewall, on internal networks, or where port 80 is not publicly reachable. Both methods are automated, with no manual file uploads or e-mail approvals. Learn About Domain Validation 🔗

Encryption and Protocols

Trustico® CaaS DV Single Site uses a 2048-bit RSA key with 256-bit symmetric encryption to secure data in transit, over the Transport Layer Security (TLS) 1.2 and 1.3 protocols with SHA-256 hashing. This gives broad compatibility across modern browsers and devices.

Certificate Transparency logging adds accountability, and Elliptic Curve Cryptography (ECC) keys are also supported for environments that benefit from smaller keys and faster handshakes. Compare Encryption Standards 🔗

Preparing for Shorter Validity Periods

Industry rules are reducing the maximum validity of an individual SSL Certificate in stages, to 200 days from March 2026, 100 days from March 2027, and 47 days from March 2029. SSL Certificates will therefore need replacing far more often than the annual cycle most teams are used to.

Without automation, each cycle means generating a Certificate Signing Request (CSR), validating the domain, downloading the SSL Certificate, and installing it. At a 47 day cycle that is a heavy, repeating task. Certificate as a Service (CaaS) handles each reissue automatically, so the change in validity makes little difference to you. Explore Traditional and CaaS Compared 🔗

USD $500,000 Warranty

Every Trustico® CaaS DV Single Site SSL Certificate carries a USD $500,000 Relying Party Warranty, which provides financial cover in the unlikely event that the Certificate Authority (CA) issues the SSL Certificate in error. Reissues are unlimited across the license through the automation. Review Warranty Details 🔗

Trustico® Site Seal

Your order includes a complimentary Trustico® site seal that you can display on the secured site to reassure visitors. It works well on payment, sign-up, and contact pages. Explore the Trustico® Site Seal 🔗

Browser Compatibility

Trustico® CaaS DV Single Site is trusted by around 99.9% of web browsers, including Chrome, Firefox, Safari, and Edge. Mobile devices on iOS and Android trust the domain without any additional configuration. Understand Browser Compatibility 🔗

Unlimited Server Licenses

You can install Trustico® CaaS DV Single Site on as many servers as you need at no extra cost, which suits cloud-native setups that use load balancing, redundancy, containers, and distributed systems. The same SSL Certificate and key are deployed to each server that serves the domain.

Programmatic Installation

The ACME client installs the SSL Certificate for you by generating the Certificate Signing Request (CSR), completing validation, and deploying it. Documentation covers integration for Apache, Nginx, Microsoft Internet Information Services (IIS), and the major cloud platforms. Access Installation Guides 🔗

Guides and Resources

Trustico® provides guides covering ACME client setup, External Account Binding (EAB) configuration, domain validation, and deployment. For command syntax and reissue scheduling specific to your client, refer also to that client's own documentation. Browse Technical Resources 🔗

Who Should Use Trustico® CaaS DV Single Site

It fits teams running automated deployment pipelines that need single-domain SSL Certificates provisioned as part of continuous integration and deployment (CI/CD), and serverless applications that deploy custom domains through platforms such as AWS Lambda, Azure Functions, or Google Cloud Functions.

It also suits managed service providers issuing SSL Certificates for client domains, e-commerce platforms that secure merchant custom domains during onboarding, and hosting platforms that offer SSL Certificates as a built-in feature. Configuration management tools such as Ansible, Terraform, and Puppet can apply it consistently across development, staging, and production.

Other Options

If you do not need programmatic automation and would rather manage a single-domain SSL Certificate by hand, the standard Domain Validation option covers the same domain. Compare Trustico® DV Single Site 🔗

Choose From Our CaaS Products

Choose from our range of SSL Certificate products compatible with Trustico® Certificate as a Service (CaaS).

Certificate as a Service (CaaS) - Pricing

Trustico® Certificate as a Service (CaaS) provides automated SSL Certificate issuance through the Automated Certificate Management Environment (ACME) protocol. The table below shows the price for each Certificate as a Service (CaaS) product.

Product Name Supplier List Price Your Price
Trustico® CaaS DV Single Site 🔗
CHF 93.00
CHF 53.00 Save 43%
Trustico® CaaS DV + Wildcard 🔗
CHF 463.00
CHF 209.00 Save 55%
Trustico® CaaS DV + Multi Domain 🔗
CHF 93.00
CHF 52.50 Save 44%
Trustico® CaaS DV + Wildcard + Multi Domain 🔗
CHF 463.00
CHF 209.00 Save 55%
Sectigo® CaaS DV Single Site 🔗
CHF 85.00
CHF 61.00 Save 28%
Sectigo® CaaS DV + Wildcard 🔗
CHF 421.00
CHF 244.00 Save 42%
Sectigo® CaaS DV + Multi Domain 🔗
CHF 84.33
CHF 61.00 Save 28%
Sectigo® CaaS DV + Wildcard + Multi Domain 🔗
CHF 421.00
CHF 244.00 Save 42%

*Multi-Domain SSL Certificate pricing is displayed per Subject Alternative Name (SAN). Each Multi-Domain product has its own minimum number of Subject Alternative Names (SANs) that are included or required to be purchased, and this minimum differs between products.

Sectigo® CaaS DV Single Site vs Wildcard Comparison

Certificate as a Service (CaaS) provides automated SSL Certificate management through APIs. Choose Single Site for individual domain automation, or Wildcard for comprehensive subdomain coverage with full API-driven SSL Certificate lifecycle management.

Feature Sectigo® CaaS DV Single Site Sectigo® CaaS DV + Wildcard
Service Type Certificate as a Service (CaaS) Certificate as a Service (CaaS)
Coverage Single Domain Only Unlimited Subdomains
Domains Covered www.example.com + example.com *.example.com + example.com
Automation Level Fully Automated Fully Automated
API Access Full RESTful API Full RESTful API
Validation Level Domain Validation (DV) Domain Validation (DV)
Validation Methods E-Mail / DNS / HTTP / HTTPS E-Mail / DNS / HTTP / HTTPS
Issuance Time Very Fast! Issued Within Minutes Very Fast! Issued Within Minutes
Auto-Renewal Automated Renewal Available Automated Renewal Available
Certificate Management Centralized Dashboard Centralized Dashboard
Integration Options API, Webhooks, SDK API, Webhooks, SDK
Ideal For SaaS Platforms, Single Domain Apps Multi-Tenant SaaS, Complex Infrastructures
Scalability Per-Domain Scaling Automatic Subdomain Coverage
Warranty $500,000 USD $500,000 USD
Encryption Strength 256-bit SSL Encryption 256-bit SSL Encryption
Browser Compatibility 99.9% Browser Trust 99.9% Browser Trust
Dual Domain Coverage Includes Root Domain SAN Free! Includes Root Domain SAN Free!
Reissues Unlimited Unlimited
Deployment Options Cloud, On-Premise, Hybrid Cloud, On-Premise, Hybrid
Information Page Product Information Page 🔗 Product Information Page 🔗
Your Trustico® Price CHF 61.00 CHF 244.00
Purchase Options Instant - Buy Now 🔗 Instant - Buy Now 🔗

Most Popular Questions

Frequently asked questions covering Trustico® CaaS DV Single Site, a Domain Validation SSL Certificate delivered through Certificate as a Service, including what it covers, the license and reissue model, validation methods, getting started with ACME and External Account Binding, and the included warranty.

Coverage of Trustico® CaaS DV Single Site

Trustico® CaaS DV Single Site is a single-domain Domain Validation (DV) SSL Certificate delivered through Certificate as a Service (CaaS). It is issued and reissued automatically through the Automatic Certificate Management Environment (ACME) protocol, which suits teams that provision SSL Certificates programmatically rather than by hand.

Domains a Trustico® CaaS DV Single Site SSL Certificate Covers

You provide your domain without the www prefix when ordering, and Trustico® adds the www version as an additional name at no charge, so ordering yourdomain.com covers both yourdomain.com and www.yourdomain.com. For names that would not normally use www, such as mail or ftp names, the www version is not added automatically but can be requested. If you order www.yourdomain.com directly, only that name is issued.

The SSL Certificate License Model

When you order Trustico® CaaS DV Single Site, you are buying an SSL Certificate license for a set period. Throughout that period your ACME client reissues the SSL Certificate as it approaches expiry, extending the expiry date against the validity remaining on your license. You order once and the domain stays protected for the term.

Extending the License Without Reinstallation

When the license period nears its end, you can extend it without any reinstallation or reconfiguration. The extended validity is recognized automatically, and your ACME client keeps obtaining SSL Certificates as usual. There is no need to generate new External Account Binding (EAB) credentials or change anything on your server.

Validation Methods for Trustico® CaaS DV Single Site

Trustico® CaaS DV Single Site supports both the HTTP-01 challenge and the Domain Name System (DNS) challenge, both automated through your ACME client. The HTTP-01 challenge places a temporary verification file on your web server, while the DNS challenge creates a temporary DNS TXT record. The DNS method suits servers behind a firewall or where port 80 is not publicly reachable.

Getting Started with Trustico® CaaS DV Single Site

You need an Automatic Certificate Management Environment (ACME) client installed on your server and External Account Binding (EAB) credentials for it. Trustico® creates a Key Identifier and an HMAC Key and sends them to you via e-mail after purchase, and they are also available in your ordering account for a limited time. You provide them during the client's first setup, after which the client handles all later issuance and reissue automatically.

Shorter Validity Periods and Automation

Industry rules reduced the maximum validity of an individual SSL Certificate to 200 days in March 2026, and continue reducing it to 100 days from March 2027 and 47 days from March 2029. Certificate as a Service (CaaS) with ACME automation handles each reissue within your license period, so your SSL Certificate stays current without manual effort however short the validity becomes.

Warranty and Included Features

Every Trustico® CaaS DV Single Site SSL Certificate includes a USD $500,000 Relying Party Warranty, the Trustico® site seal, unlimited reissues through the automation, and unlimited server licensing. It is trusted by around 99.9% of web browsers, including Chrome, Firefox, Safari, and Edge, along with mobile devices on iOS and Android.