Thawte SSL 123

Thawte SSL 123 is an entry-level, domain-validated (DV) SSL certificate. It encrypts traffic between a browser and your site without any paperwork or company vetting, which makes it a fast, low-friction way to get a single domain onto HTTPS. Below is exactly what the product covers, followed by guidance on when it is the right pick and when you should reach for something else.

Specifications at a glance

• Validation type: Domain (no paperwork). You prove control of the domain, not the legal identity of a company.
• Subdomains: N/A. This certificate secures a single hostname, not a wildcard across subdomains.
• Green address bar: N/A. DV certificates never show the extended-validation company name treatment.
• Reissue: Unlimited, so you can regenerate the certificate as often as you need during its term.
• Issuance: Within 24 hours once domain control is confirmed.
• Warranty: $500,000 relying-party warranty from the certificate authority.
• Site seal: Dynamic Thawte Site Seal.
• Encryption: Suitable 128/256-bit single-root SSL certificate.
• Browser compatibility: 99.3% browser compatibility.
• Mobile friendly: Poor mobile compatibility.
• Money-back guarantee: 15-day.

What "domain validated" actually means

Because Thawte SSL 123 is domain-validated, the certificate authority only checks that you control the domain, usually via an email, a DNS record, or a file placed on the server. There is no company paperwork and no identity vetting, which is why issuance is quick and why there is no green address bar. In terms of the actual encryption on the wire, a DV certificate is exactly as strong as a more expensive organisation-validated (OV) or extended-validation (EV) certificate. The difference is the level of identity assurance shown to visitors, not the quality of the encryption.

When Thawte SSL 123 is a good fit

This certificate suits a single blog, a landing page, a small brochure site, or any project where you simply need the padlock and encrypted traffic without waiting on validation paperwork. For operators running many sites, DV certificates are the practical default because they can be issued at speed across a portfolio. If you are securing a whole network of properties, the certificate matters far less than keeping each site on its own dedicated IP so the estate does not share a single certificate or address footprint. You can read more about that approach on our multiple Class C IP hosting page and across the SSL certificates FAQ hub.

When to choose something else

• You need to cover subdomains. Thawte SSL 123 secures one hostname only. For blog.example.com, shop.example.com and more under one certificate, choose a wildcard product instead.
• You want the company-name treatment. DV does not display an organisation identity. If that visible trust signal matters for a checkout or a financial service, look at OV or EV.
• Mobile reach is critical. The product is noted as having poor mobile compatibility, so if a large share of your visitors are on older mobile devices, weigh a certificate with broader mobile support.

Good things to know

The unlimited reissue policy means you can regenerate the certificate whenever you rotate keys or move the site between servers, and the 15-day money-back guarantee gives you a short window to change your mind. Issuance normally completes within 24 hours once you have confirmed domain control, so plan the DNS or email verification step before you need the site live. Whichever certificate you pick, the security a certificate delivers depends heavily on how the server is configured; a well-chosen cipher suite and protocol set matter as much as the certificate itself, and Mozilla publishes a widely used reference for recommended TLS server configuration.

To order this certificate or compare it with the other DV, wildcard, OV and EV options, see our full SSL certificates range.