Home / Products / Certificates
SSL/TLS · Code signing · Document signing
Certificates from GlobalSign, Sectigo and SSL.com.
Order a certificate, complete validation and download it from the client portal, with our help at each step. Every code-signing and document-signing certificate includes OneSigner Basic free.
SSL/TLS certificates
HTTPS for websites, APIs and mail servers
GlobalSign and Sectigo certificates at every validation level. DV certificates are issued within minutes of domain validation; OV and EV certificates also carry your verified company name.
Since 15 March 2026 a publicly trusted SSL/TLS certificate can be valid for at most 200 days. A one-year subscription includes the replacement certificates during the term at no extra cost; collect them from the portal or its API.
Code-signing certificates
Sign Windows software and drivers
Users and Windows see your company as the publisher. The private key lives on a hardware token, and OneSigner lets your build servers sign through it.
Document-signing certificates
PDF signatures that Adobe shows as valid
AATL certificates, trusted by Adobe Acrobat and Reader. Sign by hand with the token, or automate signing with OneSigner.
Prices are for a one-year term in US dollars, as listed on 15 November 2026. Two- and three-year terms are available for most certificates. The client portal always shows the current price, in USD or SGD.
Choosing
Which validation level?
All levels give the same encryption. What differs is what the CA checks, and so what the certificate says about you.
- DV Domain validated
- The CA checks control of the domain. Issued in minutes. Good for blogs, internal tools, APIs and mail servers.
- OV Organisation validated
- The CA also checks your company in an official registry, and the company name goes into the certificate. Good for company websites, portals and B2B systems. Required for code and document signing.
- EV Extended validation
- The strictest checks: company, address, operating existence and the person authorising the order. Chosen by banks, payment and regulated sites, and for EV code signing.
Ordering
How ordering works
- Order in the client portal, paying by card, or ask us for a quotation and invoice.
- Submit a CSR for SSL, or let us guide you through generating one. Signing certificates are generated on the hardware token.
- Validate: an email, a DNS record or a file for the domain; registry and phone checks for OV and EV.
- Download and install from the portal. For clients on our hosting we install and renew it for you.
Questions
Frequently asked
Which certificate authorities does One Sign supply?
SSL/TLS certificates from GlobalSign and Sectigo, and code-signing and document-signing certificates from GlobalSign, Sectigo and SSL.com.
How long is an SSL certificate valid?
Since 15 March 2026 a publicly trusted SSL/TLS certificate can be valid for at most 200 days. A one-year or longer subscription includes the replacement certificates during the term at no extra cost.
Do code-signing and document-signing certificates need a hardware token?
Yes. Certificate authority rules require the private key to be kept on a hardware token or in an HSM. Some products include the USB token; for others it is an option, or you can use a compatible token you already own.
Not sure which certificate fits?
Tell us what it is for, a website, software you publish or documents you sign, and we will recommend one.