The padlock on your website, issued in the European Union.
Certificates for websites, online shops, APIs and mail servers, from European Certification Authorities, with your company's name validated when that is what matters. We handle validation, installation and every renewal.
- Up to 25% off over 5 years
- Reissues included throughout the subscription
- A reminder before every renewal
The encryption is the same. What changes is what is proven about who is on the other side.
Every certificate below encrypts the connection with the same strength. The difference lies in what the Certification Authority checks before issuing, and in what is written into the certificate for anyone who looks.
| Certificate | What is checked | What goes into the certificate | Issuance | Best for |
|---|---|---|---|---|
| DV domain validation | That you control the domain | The domain only | minutes | Test environments, sites without personal data, exposed internal servers |
| OV organisation validation | The domain and the company's legal existence | Domain, company name and locality | 2 to 3 business days | Corporate websites, customer portals, APIs, mail servers |
| EV most validated extended validation | Domain, legal existence, address, activity and who is placing the order | Legal name, registration number, jurisdiction and address | 3 to 5 business days | Online shops, banking, insurance, healthcare, public services |
| QWAC eIDAS qualified website authentication | Qualified validation by a qualified provider, under the eIDAS regulation | The organisation's qualified identity, recognised across the EU | 3 to 7 business days | Banks and payment providers (PSD2), public bodies, trust services |
Mail servers: Certificates for SMTP, IMAP and Exchange, with the right names for MTA-STS and DANE. We configure them with you.
Choose the validation and what you want to protect.
Prices per year, excluding VAT, with the Certification Authority's highest warranty. Order online in three steps; the invoice follows on the same business day.
Single domain
One name, for example company.eu, with www included. The most common choice for websites and shops.
Multi-domain (SAN)
Up to 5 different domains in one certificate: company.eu, company.com, shop.company.de.
Wildcard
One certificate for *.company.eu: every first-level subdomain, present and future.
| Certificate | Single domain | Multi-domain | Wildcard | Issuance |
|---|---|---|---|---|
| DV Domain validation |
€75 |
€125 |
€240 |
minutes |
| OV Organisation validation |
€150 |
€250 |
€480 |
2 to 3 business days |
| EV Extended validation |
€200 |
€340 |
— | 3 to 5 business days |
| QWAC eIDAS qualified |
€250 |
€425 |
— | 3 to 7 business days |
| QWAC PSD2 eIDAS qualified for PSD2 |
€350 |
€500 |
— | 3 to 7 business days |
Per year, excluding VAT. 2, 3, 4 or 5-year subscriptions are paid upfront, with 15%, 17%, 20% or 25% off. Multi-domain: up to 5 domains (QWAC PSD2: up to 10). Certification Authority warranty up to €500,000 (DV), €1,750,000 (OV) and €2,000,000 (EV). EV is not available as wildcard. Reissues included throughout the subscription.
European by default. Another, if your case calls for it.
By default we issue with Asseco and Actalis, two European Certification Authorities. When a customer or a system requires another brand, we also work with the main global Certification Authorities.
Asseco and Actalis
Two European Certification Authorities, both eIDAS qualified providers, on the EU trusted lists published by the European Commission. SSL/TLS DV, OV and EV, multi-domain, wildcard and QWAC.
GlobalSign
Founded in Belgium. Our choice for BIMI certificates and an alternative for organisation-validated SSL/TLS.
DigiCert and Sectigo
Headquartered in the US. For those with group, customer or platform requirements that call for one of these brands.
Certificates keep getting shorter. Your subscription does not.
Since 15 March 2026, a public SSL/TLS certificate lasts at most 200 days. In March 2027 that drops to 100, and in March 2029 to 47 days. The rules come from the CA/Browser Forum and apply to every Certification Authority.
You sign up with us for one year, or more. During that time we reissue the certificate whenever the maximum validity requires it, at no extra cost, and let you know before each swap. If you prefer, we automate installation with ACME.
| From | Maximum validity |
|---|---|
| 15 Mar 2026 | 200 days |
| 15 Mar 2027 | 100 days |
| 15 Mar 2029 | 47 days |
Source: CA/Browser Forum, Baseline Requirements (ballot SC-081).
More than the certificate file.
Guided validation
We tell you which documents are needed and handle domain verification by DNS, email or HTTP.
Installation
On Plesk, cPanel, nginx, Apache, IIS and load balancers. Or we walk you through the steps.
Final check
We confirm the chain, protocols and ciphers, and fix whatever the test flags.
Renewals without surprises
We warn you before every expiry and reissue within the subscription.
SSL/TLS certificates, demystified.
What is a QWAC and who needs one?
See the QWAC page. In short: a QWAC (Qualified Website Authentication Certificate) is a website certificate issued by a qualified trust service provider under the eIDAS regulation. It binds the website to an organisation whose identity has been verified to a qualified level.
It is required for payment service providers under PSD2 and increasingly requested by public bodies. Under eIDAS 2 (Regulation (EU) 2024/1183), browsers must recognise QWACs (Article 45).
Do the green padlock and green bar still exist?
Browsers no longer show the EV green bar. The company name is still in the certificate and anyone who inspects it sees it, as do systems that check suppliers automatically. The difference between DV, OV and EV lies in what is proven, not in the icon.
Why not use a free certificate?
Free certificates are DV: they prove you control the domain and nothing more. They serve many websites well. When you need to show the company behind the site, have human support and a CA warranty, or meet a requirement from a customer, a bank or a public tender, you need OV, EV or QWAC.
Can I keep using ACME automation?
Yes, when the chosen Certification Authority supports it, as Asseco and Actalis do. Once the organisation is validated, renewals become automatic. We confirm the setup with you before you order.
How long does issuance take?
A DV is ready in minutes. An OV takes two to three business days; an EV, three to five; a QWAC, three to seven. Incomplete documents cause most delays, so we start by telling you exactly what is needed.
Need more domains or many certificates?
We put together a tailored quote: more than 5 domains, dozens of certificates or centralised management. We reply within one business day.
Prefer to talk? +351 210 205 164
weekdays, 9:00 to 18:00 Lisbon time
By email: support@sooma.com