Sectigo (Comodo)

Affordable OV and EV SSL certificates

3.6(0 reviews)paidFounded 1998United States

Integrates with

Sectigo (formerly Comodo CA) is one of the largest SSL certificate providers. DV certificates from about $7.45/year and OV from about $30/year on the reseller channel (higher direct), plus wildcard and multi-domain certificates. Good reseller program.

What Sectigo actually is

Sectigo is a certificate authority — one of the ten largest in the world by most counts — selling TLS/SSL certificates, code signing certificates and certificate lifecycle management. The lineage matters when you compare vendors: this is the former Comodo CA, carved out of Comodo Group by Francisco Partners in 2017, renamed Sectigo in 2018, and taken over by GI Partners in 2020. Comodo Group itself went on to become Xcitium; the CA business is a separate company (Sectigo Limited), headquartered in Scottsdale, Arizona since 2023 after years in Roseland, New Jersey.

The product lines carry the old brand names that most buyers actually search for: PositiveSSL (DV and EV), InstantSSL (OV), EssentialSSL, EnterpriseSSL and UCC/multi-domain variants across all three validation levels — domain, organization and extended — in single-domain, wildcard and multi-domain formats. All of it roots into publicly trusted root certificates distributed with operating systems and browsers, which is ultimately what you are buying: trust that is already installed on the client.

This is not hosting, so our SSL certificates listing for Sectigo is about the certificate product rather than infrastructure. Two properties define it: it is cheap relative to the DigiCert-tier authorities, and it is sold through a very large reseller channel where the same certificate can cost five times more or less depending on where you click.

Pricing: what you really pay

This is the section where the channel decides your bill. Sectigo sells direct through its own PositiveSSL storefront and through hundreds of resellers, and the gap is large. On Sectigo's own store, the comparison pages list OV single-domain around $110 per year, OV multi-domain at $250 and OV wildcard at $500, with a PositiveSSL DV multi-domain bundle at $175 for one year (cheaper on multi-year terms — $156/year at three years, $145/year at five). Code signing runs $715 for OV and $829 for EV with a hardware token.

On the reseller channel the numbers look like a different market: PositiveSSL DV from about $7.45–$8.95 per year, InstantSSL OV around $30–$34, PositiveSSL EV around $80–$108, PositiveSSL DV wildcard around $78–$83, and multi-domain EV around $145–$296 depending on term length. Multi-year subscriptions (up to five or six years) cut the annual rate further — but read the small print: for CA/Browser Forum compliance each subscription certificate is still issued with a one-year term and must be reissued annually. You are prepaying, not getting a five-year certificate.

Warranties scale with product: roughly $50,000 on DV certificates, $50,000–$250,000 across the InstantSSL OV tiers, $500,000 on PositiveSSL OV, and $1–1.75 million on the EV and enterprise lines. A 30-day money-back guarantee is standard and unlimited server licenses plus free reissues are included across the range. Our advice is unchanged from years of watching this market: buy on the reseller channel, set a calendar reminder before the renewal price (renewals are where margins get recovered), and treat the warranty as a headline rather than an insurance policy.

Performance & infrastructure

Certificate performance is not a benchmark problem — every CA issues the same 256-bit SHA-2/ECC cryptography, so the encryption is identical to what DigiCert or GlobalSign sell. What differs is validation speed, compatibility and operational tooling, and Sectigo's position on those is documented.

Validation speed: DV certificates issue within minutes via email or DNS CNAME validation; OV is quoted at one business day once documentation is received (resellers quote one to three days, with customer reports of longer waits on complex organizations); EV is quoted at one day after documentation, with resellers quoting three to five business days in practice. Compatibility is advertised at 99.6% of browsers and devices, which is consistent with a major publicly trusted root.

Operational tooling is broader than the certificate shop suggests. There is an ACME-compatible path for automated renewal, a certificate lifecycle management platform for enterprises juggling hundreds of certificates, and the company has expanded beyond TLS into IoT device certificates, website security (SiteLock, acquired 2021) and backup products (CodeGuard, acquired 2018). For an agency or hosting company managing certificates at volume, the reseller program and management tooling are the real product; the individual certificate is a commodity.

Where it falls short

The channel chaos is the first problem. The same PositiveSSL Wildcard appears at $78, $160 and a "$269.99 Sectigo price" in different places, and Sectigo's own store is routinely the most expensive option. That is not fraud — it is a wholesale/reseller model — but it punishes uninformed buyers and makes honest price comparison nearly impossible without checking three sites. Multi-year prepayment structures, where you renew a one-year certificate annually against a prepaid term, also confuse people into thinking they hold a longer certificate than they do.

OV and EV validation is slower than the marketing implies. "Within 1 day after all documentation is received" is a conditional promise; the documentation step is where days disappear, and customer complaints about validation back-and-forth and support response recur across review aggregators. Brand perception is the softer issue: Sectigo certificates are technically equivalent to costlier alternatives, but in procurement conversations with enterprises, the Comodo-era budget reputation still trails DigiCert.

Finally, for our audience specifically: if you only need DV for a handful of sites, Let's Encrypt-style free automation covers the same encryption and browser trust at zero cost. The paid product earns its price when you want OV/EV identity, wildcards, multi-domain SANs, warranties and someone to call.

A note on what validation actually involves, since it is where buyers underestimate the effort. DV asks only to prove domain control — a DNS CNAME record or an approval email — which is why it issues in minutes. OV requires the CA to verify the organization against government or commercial databases plus a callback, which is the step that turns into days when the company name, address or phone listing does not match the application. EV adds legal existence checks and a signed agreement, and historically the strictest bar of the three. None of this is unique to Sectigo, but their resellers quote issuance windows in business days for a reason: plan certificate purchases before you need them, not on launch day.

The warranty deserves one honest paragraph. A CA warranty is not insurance you file when your site is hacked; it is a narrow indemnity covering losses caused by mis-issuance or validation failure. The headline amounts — $50,000 on DV up to $1.75 million on EV lines — sound reassuring on a comparison table and are almost never paid out. We list them because they differentiate products, and we would not pay a meaningful premium for a higher warranty tier alone. What you are actually paying for is the validation level, the coverage format and the operational support around renewal.

For resellers and agencies, the program terms are the strongest commercial reason to stay in the Sectigo ecosystem. White-label storefronts, volume discounts, ACME-based automation and centralized reissue workflows make certificate resale a manageable business rather than a per-order chore, and the breadth of the catalog means a single vendor covers almost every request a hosting customer makes. Compare that with stitching together a free DV issuer, a mid-tier OV provider and a premium EV brand, and the consolidation argument is easy to make.

Who should pick this

Our pick for web agencies, hosting resellers and SMBs that need OV or EV certificates at volume without DigiCert-tier pricing. The reseller program is mature, the product catalog is deep (every validation level in single, wildcard and multi-domain formats, plus code signing), and the price per certificate on the reseller channel is hard to beat for OV/EV. Multi-domain and wildcard buyers get the clearest savings versus per-domain certificates.

It also fits teams with compliance checklists that specifically require OV or EV — banking-adjacent, e-commerce with procurement requirements, or enterprise vendor questionnaires that ask for organization validation. The certificate lifecycle management platform is worth evaluating if you are managing dozens of expiring certificates and the renewal calendar has already bitten you once.

We would not pick it for pure DV use (free automation wins), for buyers who want one predictable price from one vendor (the channel will frustrate you), or for organizations whose procurement treats CA brand as a trust signal in itself.

Key takeaways

Sectigo (formerly Comodo CA) is a top-ten certificate authority, US-headquartered (Scottsdale, Arizona), owned by GI Partners since 2020.
Full DV/OV/EV catalog in single-domain, wildcard and multi-domain formats, plus code signing from $715 (OV) and $829 (EV) on the official store.
Channel pricing varies dramatically: PositiveSSL DV from about $7.45/year at resellers versus $175/year bundles on Sectigo's own store; OV from about $30–$34/year resold versus $110 direct.
Warranties run from $50,000 (DV) to $1.75 million (EV lines); unlimited server licenses, free reissues, 30-day money-back.
DV issues in minutes; OV/EV validation realistically takes one to five business days once documentation is in.
Strong value for agencies and OV/EV buyers who shop the reseller channel; DV-only users should compare free automation first.

Sources

Pros

Deep catalog: DV, OV and EV in single-domain, wildcard and multi-domain formats plus code signing
Aggressive reseller pricing — PositiveSSL DV from about $7.45/year, OV from about $30/year
99.6% browser and device compatibility from a publicly trusted root
Unlimited server licenses, free reissues, 30-day money-back across the range
Mature reseller program and certificate lifecycle management tooling for volume buyers

Cons

Channel pricing is chaotic — the same certificate varies 3-5x between resellers and the official store
OV/EV validation routinely runs 1-5 business days once documentation is submitted, with recurring support complaints
Multi-year subscriptions are prepaid one-year certificates requiring annual reissue, which confuses buyers
Comodo-era budget brand perception trails DigiCert in enterprise procurement
DV-only use cases are undercut by free automated certificate authorities