DigiCert UltraDNS, $ (on request) on DNS

UltraDNS has been added on Jul 30, 2026

🔌 Domains Allowed :	1
💳 Payment Methods :	Credit / Debit / Prepaid CardsPayPalWire TransferCheck Payments
🔨 Control Panel :	[In-house]
🔧 Category :	DNSCDNDDoS Protection
✍️ Support Options :	EmailPhone / Toll-FreeLive ChatAvailable 24/7
⚑ Targeting :	US
🚀 Uptime :	100 %

See also initial UltraDNS plan location on their website!

---

*📜 Plan description

📄 Editorial Review

DigiCert is a US digital trust, certificate authority, PKI, managed DNS and internet security company founded in 2003 by Ken Bretschneider. Its headquarters are in Lehi, Utah, and the business has grown from a commercial TLS certificate issuer into a global provider of public and private certificates, cryptographic identity management, software integrity, document signing, connected-device security, email authentication and post-quantum readiness services.

DigiCert is privately held, with backing from Clearlake Capital Group, Crosspoint Capital Partners and TA Associates. Dr. Amit Sinha has served as chief executive officer since October 2022. The company has more than 2,000 employees, serves over 125,000 customers in more than 180 countries, and works with over 90% of Fortune 500 companies.

This is not a traditional web hosting provider. DigiCert does not operate as a shared hosting, reseller hosting, VPS or dedicated server company. Its services instead secure the websites, applications, servers, APIs, email systems, software packages and connected devices operated by hosting companies and their customers. For web hosting users, the most relevant services are TLS certificates, managed authoritative DNS, DDoS protection, web application security, certificate automation and domain identity validation.

DigiCert has played an important role in the certificate industry. It became a founding member of the CA/Browser Forum in 2005, worked with Microsoft on an early multi-domain certificate in 2007 and operated a Certificate Transparency log accepted by Google in 2013. Its work later expanded into IoT security, drone identity, enterprise automation and post-quantum cryptography.

A major expansion occurred in 2017, when DigiCert acquired Symantec’s Website Security and certificate authority operations. The transaction included the GeoTrust, RapidSSL and Thawte certificate brands. DigiCert rebuilt the inherited certificate infrastructure and completed the required replacement of affected certificates after browser vendors withdrew trust from the former Symantec hierarchy.

The company continued expanding through several acquisitions. QuoVadis joined DigiCert in 2019, adding qualified trust services for the European Union and Switzerland. Mocana was acquired in 2022, strengthening embedded-device and IoT security. DNS Made Easy and Constellix were acquired in June 2022, adding managed authoritative DNS and traffic-management technology. Vercara joined DigiCert in September 2024, bringing UltraDNS, UltraDDoS Protect, UltraWAF, UltraAPI and UltraEdge into the portfolio. Valimail was acquired in September 2025, extending DigiCert into DMARC enforcement, email impersonation protection and authenticated business email.

The principal enterprise environment is DigiCert ONE. This platform combines certificate lifecycle management, public and private trust, software signing, document signing, device identity, content authenticity, email security and DNS services. Depending on the product and customer requirements, DigiCert ONE can operate in the cloud, in a private cloud, on-premises, in a hybrid environment, within a sovereign regional deployment or in an isolated network.

Trust Lifecycle Manager is one of the company’s most valuable services for large hosting businesses and enterprises. It discovers certificates and cryptographic assets across networks, builds a centralized inventory, identifies certificates from different issuing authorities, applies security policies and automates issuance, renewal and revocation. It supports ACME and enterprise integrations, while advanced plans add private PKI, Kubernetes integration, privileged-access connections, post-quantum preparation, test environments and dedicated service management.

CertCentral TLS Manager handles public TLS certificate administration. It provides a central location for ordering, validating, issuing, replacing, revoking and renewing certificates. Administrators can delegate roles, manage domains, monitor expiration dates, control spending, receive Certificate Transparency alerts and automate deployment through APIs or ACME. More than 20 certificate configurations are available, making CertCentral suitable for companies managing anything from a small group of business domains to a large international certificate estate.

The main certificate families include Basic TLS, Secure Site TLS and Secure Site Pro TLS. Basic TLS provides organization-validation and extended-validation certificates, unlimited certificate replacements, automation support and a certificate warranty of up to $1.25 million. Secure Site TLS adds priority validation, malware and blocklist monitoring, the DigiCert Smart Seal and warranty protection of up to $1.75 million. Secure Site Pro TLS includes the broadest security package, with vulnerability scanning, PCI-oriented checks, Certificate Transparency monitoring and additional enterprise controls.

Wildcard certificates protect one registered domain and its same-level subdomains. Multi-domain certificates can secure as many as 250 domains or SAN entries through a single certificate. This can simplify administration for companies operating many related websites, customer portals, internal services or geographically distributed domains.

The direct DigiCert certificate range concentrates mainly on organization-validation and extended-validation products. Customers looking only for a low-cost domain-validation certificate are more likely to use one of DigiCert’s associated brands or a reseller. The primary DigiCert range is better suited to businesses requiring verified identity, formal warranty protection, stronger validation procedures and centralized certificate management.

Certificate subscriptions can include automated malware checks, blocklist monitoring, vulnerability scanning, PCI-related testing, Certificate Transparency monitoring and the DigiCert Smart Seal. The Smart Seal displays authenticated company and certificate information directly to visitors, helping commercial websites demonstrate that the organization behind the domain has completed identity validation.

UltraDNS is DigiCert’s managed authoritative DNS platform. It uses a globally distributed Anycast network with DNSSEC, DDoS resistance, geographic routing, ASN-based routing, health checks, traffic steering, analytics and API access. UltraDNS² can place primary and secondary authoritative DNS services on separate Anycast infrastructures, reducing dependence on a single DNS network.

The UltraDNS infrastructure processes more than 100 billion authoritative DNS queries per day and has capacity approaching 150 billion daily queries. The wider network-security portfolio includes UltraDDoS Protect, UltraWAF, UltraAPI, UltraEdge, recursive DNS protection and application-performance monitoring. These services are suitable for hosting providers, financial institutions, online platforms and enterprises requiring protection above the individual-server level.

Private CA provides managed root and intermediate certificate authorities for internal applications, users, Wi-Fi authentication, VPN access, workloads and private devices. It supports cloud, on-premises, hybrid and air-gapped environments. Certificate enrollment can be automated through SCEP, EST, ACME and CMPv2, while signing keys can remain protected by FIPS-aligned hardware security modules.

Device Trust Manager handles digital identities for IoT equipment, embedded products and industrial systems. Credentials can be provisioned during manufacturing and bound to TPMs or secure elements. Lifecycle policies can then control device enrollment, authentication, renewal and retirement. The platform is designed for very large deployments that may contain millions or even billions of connected devices.

Software Trust Manager protects code-signing keys and applies centralized signing policies. Sensitive private keys can remain inside FIPS-certified hardware instead of being copied to development workstations or build servers. APIs, command-line tools and CI/CD integrations allow software signing to become part of an automated release pipeline while maintaining a detailed audit trail.

Document Trust Manager covers electronic signatures, qualified signatures, electronic seals and trusted timestamps. It supports regulated European and Swiss use cases, remote signing and integration with document-management and electronic-signature workflows.

Content Trust Manager applies C2PA-compatible content credentials and cryptographic signatures to digital media. It can establish where an image, document or other digital asset originated and whether it has been modified. This has become particularly relevant for organizations dealing with generative AI, synthetic media and unauthorized content alteration.

Messaging Trust combines DMARC monitoring, enforcement, S/MIME certificates and verified brand logos. The service protects domains against email impersonation while enabling encrypted or digitally signed messages. The addition of Valimail substantially improved DigiCert’s ability to manage business email authentication and domain enforcement.

DigiCert also supplies Verified Mark Certificates, Common Mark Certificates, individual and organizational S/MIME certificates, code-signing certificates, cloud-based KeyLocker storage, document-signing certificates, qualified website-authentication certificates, PSD2 certificates, European qualified personal signatures, organizational electronic seals, Dutch PKIoverheid certificates and specialized non-browser X.509 certificate programs.

Quantum Central supports cryptographic discovery and post-quantum preparation. It inventories algorithms, certificates and key sizes, identifies systems that require remediation, assigns policy status and connects the results with ticketing or development workflows. This gives organizations a practical way to prepare for the eventual replacement of cryptographic algorithms that may become vulnerable to sufficiently capable quantum computers.

The company’s online services are modern, responsive and practical on both desktop and mobile devices. English is fully supported, together with localized content in German, Spanish, French, Italian, Dutch, Portuguese, Japanese, Korean, Traditional Chinese and Simplified Chinese.