# Cheapest multi-domain (SAN/UCC) SSL certificates in 2026

> The cheapest DV, OV and EV multi-domain SSL certificates with verified 1-year prices, the names each includes and when free ACME is enough.

Source: https://ssl.sh/compare/cheapest-multi-domain-ssl/
Last updated: 2026-11-10

The cheapest multi-domain certificate is free: Let's Encrypt and other ACME CAs can put several names into one certificate. The cheapest paid option on 10 November 2026 was **[Namecheap SAN Certificate](https://ssl.sh/certificates/namecheap-san-certificate/) at $35.99** with three domains, followed by [Sectigo PositiveSSL Multi-Domain](https://ssl.sh/certificates/positivessl-multi-domain/) at Trustico for $57.00. For OV and EV, Namecheap led at $79.99 and $163.99.

A multi-domain certificate, also sold as a SAN or UCC certificate, lists several different hostnames such as `example.com`, `example.net` and `shop.example.org` in its Subject Alternative Name extension, defined in [RFC 5280](https://www.rfc-editor.org/rfc/rfc5280). All prices below are 1-year prices in US dollars from the sellers' own pages on 10 November 2026; prices change, so the seller's checkout page is authoritative. Commissions never affect the order.

## Cheapest DV multi-domain certificates

Namecheap SAN Certificate at $35.99 for three domains was the cheapest paid DV multi-domain certificate.

| Certificate | Cheapest seller | 1-year price | Names included / other sellers |
|---|---|---|---|
| [Namecheap SAN Certificate](https://ssl.sh/certificates/namecheap-san-certificate/) | [Namecheap](https://ssl.sh/go/namecheap/) | $35.99 | 3 domains; renews at $43.19 |
| [Sectigo PositiveSSL Multi-Domain](https://ssl.sh/certificates/positivessl-multi-domain/) | [Trustico](https://ssl.sh/go/trustico/) | $57.00 | 1 primary + 2 additional; GoGetSSL $120.00, The SSL Store $150.00 |
| [Sectigo DV Multi-Domain (UCC)](https://ssl.sh/certificates/sectigo-ucc-dv/) | [GoGetSSL](https://ssl.sh/go/gogetssl/) | $103.20 | 2 SANs listed; The SSL Store $129.00, Trustico $207.00 |
| [GeoTrust QuickSSL Premium SAN](https://ssl.sh/certificates/geotrust-quickssl-premium-san/) | GoGetSSL | $208.04 | — |

The PositiveSSL Multi-Domain price ranged from $57.00 at Trustico to $150.00 at The SSL Store for the same Sectigo product. That spread is bigger than the gap between most brands, so compare the identical product across sellers first.

## Cheapest OV and EV multi-domain certificates

Namecheap was cheapest for both levels: $79.99 for OV and $163.99 for EV, each with three domains.

**OV** (your company name appears in the certificate):

- [Namecheap OV Multi-Domain SSL](https://ssl.sh/certificates/namecheap-ov-multi-domain-ssl/): $79.99 with three domains, renewing at $95.99.
- [Sectigo OV Multi-Domain](https://ssl.sh/certificates/sectigo-ov-multi-domain/): $115.38 at GoGetSSL, with two SANs listed as included.
- [SSL.com Multi-Domain UCC/SAN (OV)](https://ssl.sh/certificates/ssl-com-ucc-ov/): $177.00 directly from the CA.

**EV** (the only way to cover several hostnames with EV, because EV certificates cannot be wildcards):

- [Namecheap EV Multi-Domain SSL](https://ssl.sh/certificates/namecheap-ev-multi-domain-ssl/): $163.99 with three domains, renewing at $196.79.
- [Sectigo EV Multi-Domain](https://ssl.sh/certificates/sectigo-ev-multi-domain/): $256.00 at GoGetSSL, $320.00 at The SSL Store and $828.00 at Trustico.

## Count the names, not the headline price

The base price covers only a few names, and sellers describe them differently: Namecheap says three domains are included, Trustico says one primary plus two additional domains, and GoGetSSL lists two SANs on some product pages. Each extra name has its own per-year price, shown on each certificate page linked above. Before comparing, write down every hostname you need, including both `example.com` and `www.example.com` if you serve both, and calculate the total for that list at each seller.

If the list keeps growing with subdomains of one domain, a [wildcard certificate](https://ssl.sh/compare/cheapest-wildcard-ssl/) may be cheaper. Our [wildcard vs multi-domain](https://ssl.sh/compare/wildcard-vs-multi-domain/) guide compares the two shapes.

## A worked example

With four names, most base prices cover only three, so expect to pay for one extra name. Say you run `example.com`, `www.example.com`, `example.net` and `shop.example.org`. That is four names. Namecheap's SAN Certificate includes three, so you pay $35.99 plus one extra domain. PositiveSSL Multi-Domain at Trustico also covers three names (one primary plus two additional), so it is $57.00 plus one extra. If the seller adds the `www` name for free, the count drops to three and the base price is enough.

Now compare that with the alternatives. Four separate free ACME certificates cost nothing and can be renewed independently. Two paid wildcard certificates would be wasteful here, because only one of the domains has more than one hostname. The multi-domain certificate wins only when you need one paid certificate, for example because a single load balancer serves all four names and your platform cannot run ACME.

## Free multi-domain certificates

Let's Encrypt's FAQ confirms that one certificate can contain several names using the Subject Alternative Name mechanism. ACME clients such as certbot and acme.sh can request such certificates and renew them on a schedule. As long as you can prove control of every name (by HTTP or DNS challenge), a free multi-domain certificate is technically equivalent to a paid DV one. Paid multi-domain certificates make sense when you need OV or EV identity on all names, when your platform cannot run ACME, or when a contract requires a commercial CA.

## Multi-year plans and reissues

Namecheap listed its SAN Certificate at $32.99 per year for 2 to 4 years and $19.50 per year on a 5-year plan. These are subscriptions: since 15 March 2026 a publicly trusted TLS certificate lasts at most 200 days, falling to 100 days on 15 March 2027 and 47 days on 15 March 2029. Over a multi-year plan the certificate is reissued many times, and every reissue must be deployed to every server that uses it. Adding or removing a name also means a reissue. See [multi-year SSL after the 200-day limit](https://ssl.sh/compare/multi-year-ssl-after-200-days/).

## Things to know before buying

Four properties of multi-domain certificates affect security and management:

- **Every name is public.** Chrome requires publicly trusted TLS certificates to be logged in Certificate Transparency, so anyone can see all the names on your certificate with a [CT search](https://ssl.sh/tools/ct-search/). Do not list internal or unreleased hostnames.
- **One key for all names.** All servers that share the certificate share the private key. If one of them is compromised, you must revoke and reissue for all names.
- **Different owners, different certificates.** If the domains belong to different teams or clients, separate certificates are easier to manage and do not reveal one customer's domains to another.
- **CAA for every domain.** Each listed domain's CAA records must allow the issuing CA; check them with the [CAA checker](https://ssl.sh/tools/caa-checker/).