TLS/SSL. S/MIME.
Code signing.

Yes. For each domain registered and managed by InterNetX, you can order a free TLS/SSL certificate "Basic SSL”. This can be used to secure the domain and 9 subdomains. Sounds good? Then register domains in AutoDNS and get your free TLS/SSL certificate today.

InterNetX is accredited directly at all international certificate authorities (CAs) like DigiCert, GeoTrust, GlobalSign, Sectigo and Thawte. This allows us to offer you a wide range of different certificates with diverse features and options (SAN, wildcard, Multi-year Plan) which can be acquired via AutoDNS.

The best choice of certificate always depends on which medium requires protection, signature and encryption: a website (with or without subdomains or multidomains), emails, code or documents. In order to help our customers find the best product in our certificate portfolio, we have developed the SSL Wizard, which can be used in AutoDNS. It recommends the best certificate for your business needs based on the data you specify. Certificates can be ordered directly in AutoDNS.

Basically, the certificates differ with regard to the security level that is guaranteed by the varying intensity of validation processes undertaken by the certification authority (CA).

There are three types of TLS/SSL certificates:

• domain validation certificates (DV)
• organization validated certificates (OV)
• certificates with extended validation(EV)

The domain validation is carried out via a TXT in the domain zone, a file auth entry or through confirmation of the email sent by the CA.

With organization validation, the domain is also validated as with DV certificates. Additionally, the CA also checks the organization applying for the certificate. This is carried out by using public resources such as the commercial register. Further checks are undertaken by calling the organization. To do this, relevant telephone numbers are found by checking public registries.

With extended validation, the domain and organization are validated according to the processes described above. Over and above this, the specified administrative contact is also verified through an email authentication process.

Domain validation is carried out within a few minutes. It can be done directly after ordering the certificate, either via a TXT entry in the domain zone, a file auth entry or via email confirmation.

The validation of OV certificates usually takes 1 - 2 working days as not only the domain, but also the organization itself must be validated.

EV certificates are generally issued within 2 - 5 working days. The domain, the organization and the administrative contact are verified, a process requiring more time.

Yes, organization validation or extended validation always takes place after 397 days at the latest, regardless of the term selected in the Multi-year Plan.

A reissue is a new issuance or update of an existing certificate. Reissuing certificates may be required if the server changes and a new CSR key (private key) is needed or if the private key is lost. The reissue is free of charge. The certificate term and other date relating to the certificate are not changed during a reissue. However, it is possible to specify a new CSR or to extend the term if the certificate was ordered with a Multi-year Plan.

By creating a CSR, a unique key pair (public/private) is generated for the certificate. A CSR is usually created on a web server, but can also be created directly in AutoDNS. It is the most important component for ordering a TLS/SSL certificate. An order can only be sent to the certification authority with the CSR.

TLS/SSL, S/MIME and code signing certificates are limited to a regular validity period of 12 months. However, a longer validity period can optionally be selected when ordering with a Multi-Year Plan.

The maximum validity periods depend on the kind of certificate and the provider

A short overview:

TLS/SSL: regular 12 months

• DigiCert with Multi-Year Plan: max. 36 months
• GeoTrust Multi-Year Plan: max. 36 months
• RapidSSL Multi-Year Plan: max. 36 months
• Thawte Multi-Year Plan: max. 36 months
• Sectigo Multi-Year Plan: max. 60 months

S/MIME: max. 36 months (from April 2022 max. 24 months)

Code signing: max. 36 months

With the Multi-year Plan, longer validity periods can be selected for TLS/SSL or VMC certificates. A reissue at the actual expiry date - i.e. after 12 months - extends the certificate by a further 12 months until the Multi-year Plan for this certificate has been exhausted.

After the maximum term of 397 days, a revalidation for further extension is mandatory in order to continue to meet all security guidelines as set out by the CA/B forum.

With AutoDNS, InterNetX enables the management and reselling of all encryption products (TLS/SSL, S/MIME and code signing certificates) in addition to domains in a single interface.