Overview
Founded in 1998 and headquartered in Roseland, New Jersey, USA, Sectigo (formerly Comodo CA, rebranded in 2018) is the world's largest commercial SSL certificate authority. As of 2026, Sectigo has issued over 100 million certificates across 150+ countries, with annual issuance volume among the highest in the industry and the largest market share among commercial CAs.
Sectigo is known for its cost-effective pricing — SSL certificates are typically 1/3 to 1/2 the price of DigiCert — while offering the full range from DV to EV certificates, plus code signing, IoT device certificates, and enterprise managed PKI services. The SCM (Sectigo Certificate Manager) enterprise platform supports API and ACME protocol integration for bulk certificate management in mid-to-large organizations. Sectigo also operates the world's largest publicly trusted IoT CA network.
Key Strengths
- Largest Commercial CA Scale: Over 100 million certificates issued with dominant market share among commercial CAs. Full DV, OV, EV SSL/TLS, wildcard, and multi-domain (SAN) certificate support for everything from personal sites to multinational enterprises. See CDN and SSL/TLS configuration best practices for guidance.
- Highly Competitive Pricing: DV certificates $30-$80/yr, OV $80-$200/yr, EV $150-$400/yr — roughly 1/3 to 1/2 of DigiCert's pricing. WebTrust certified with browser root trust, Sectigo offers the best value in the commercial CA market for security-conscious organizations with limited budgets.
- SCM Enterprise Platform: Sectigo Certificate Manager provides unified certificate discovery, enrollment, deployment, renewal, and revocation. REST API and ACME protocol integration enable full automation with environment deployment pipelines.
- IoT & PKI Capabilities: Sectigo IoT Identity supports large-scale device identity management for manufacturing, connected vehicles, and smart home applications. Managed PKI services provide complete public key infrastructure for organizations without in-house CA capabilities — no hardware investment required.
- Most Comprehensive Product Line: Beyond SSL/TLS, Sectigo offers code signing certificates (Microsoft Authenticode, Java, Adobe), S/MIME email certificates, document signing certificates, and EV code signing certificates, covering all enterprise digital security scenarios.
Product Ecosystem
SCM (Sectigo Certificate Manager)
SCM provides unified certificate lifecycle management: automatic certificate discovery, centralized policy management, bulk enrollment and deployment, expiry alerts, and compliance auditing. SCM can manage both Sectigo-issued and third-party CA certificates across multi-cloud environments. Through REST API and ACME protocol, SCM integrates with CMDB, service desk systems, and CI/CD pipelines for fully automated certificate operations.
Code Signing Certificates
Sectigo offers standard and EV code signing certificates. EV code signing requires hardware token-protected private keys and immediately establishes Microsoft SmartScreen reputation, reducing SmartScreen filter warnings during Windows application distribution. Supports Microsoft Authenticode, Java JAR, Adobe AIR, and macOS code signing.
IoT Device Identity
Sectigo IoT Manager is the world's largest publicly trusted IoT CA platform, supporting MQTT, TLS, and PKI-based device identity management at scale. Typical applications include industrial sensor authentication, smart home device identity, and connected vehicle V2X communication security. Certificate issuance and revocation are fully automated via REST API.
Limitations
- Brand Confusion: The 2018 rebranding from Comodo CA to Sectigo caused market confusion. Long-time users still refer to "Comodo certificates," and Comodo's historical security incidents make some enterprise customers cautious. Rebuilding brand recognition in the premium market segment requires continued investment.
- Support Response Times: Standard support channels can experience 24-48 hour response times during peak periods. Free support options are limited; premium support plans are available but add significant cost.
- SCM Interface Learning Curve: SCM Manager is feature-rich but its UI feels dated compared to DigiCert's CertCentral. New users need time to learn navigation and workflows. See CDN and SSL/TLS configuration best practices for guidance.
- Lower Brand Premium in Enterprise Market: Among Fortune 500 companies and regulated industries (finance, government), Sectigo's brand recognition trails DigiCert, limiting EV certificate premium pricing power and impacting large procurement evaluations.
Use Cases
- SMB Business Websites (★★★★★): Best value commercial OV certificate solution with affordable pricing and organization identity verification. Pair with CDN acceleration for improved global performance.
- E-commerce Platforms (★★★★): EV certificates display the green address bar at a significantly lower price than DigiCert, ideal for cost-conscious online stores.
- Code Signing (★★★★): EV code signing certificates are priced below DigiCert, making them an excellent choice for small-to-medium software developers seeking SmartScreen reputation.
- IoT Bulk Certificates (★★★★★): IoT Manager provides large-scale device certificate management with market-leading cost efficiency for manufacturing and connected vehicle scenarios.
- Budget-Conscious Enterprise Customers (★★★★★): When commercial CA trust chain is required but budget is limited, Sectigo offers the best compromise.
Pricing
| Certificate Type | Annual Price Range | Issuance Time | Best For |
|---|---|---|---|
| DV SSL | $30-$80 | Minutes | Personal websites, testing |
| OV SSL | $80-$200 | 1-3 business days | Business websites, commercial |
| EV SSL | $150-$400 | 1-5 business days | E-commerce, SaaS platforms |
| Wildcard SSL | $100-$300 | 1-3 business days | Multi-subdomain protection |
| Code Signing | $100-$300 | 1-3 business days | Software distribution signing |
| EV Code Signing | $200-$400 | 2-5 business days | Windows app distribution |
Note: Prices vary by reseller and promotions. Contact Sectigo or authorized partners for current quotes.
FAQ
- What is the relationship between Sectigo and Comodo? Sectigo is the rebranded name of Comodo CA (2018). After rebranding, Sectigo focuses exclusively on the CA business while the Comodo brand continues for cybersecurity products. At the CA level they are the same entity with fully inherited root certificates and trust chains—see CDN and SSL/TLS configuration best practices.
- Does Sectigo support ACME auto-renewal? Yes. Sectigo ACME service supports automated enrollment and renewal for DV and some OV certificates, compatible with Certbot, acme.sh, and other ACME clients — ideal for DevOps automation workflows—see CDN and SSL/TLS configuration best practices.
- Sectigo vs Let's Encrypt: which to choose? Let's Encrypt is completely free but only offers DV certificates with no commercial support. Sectigo requires payment but provides OV/EV organization validation, commercial support, and SLA guarantees. Choose Sectigo if your site needs organizational identity or handles online transactions; choose Let's Encrypt for personal blogs. See CDN and SSL/TLS configuration best practices for guidance.
- What are the best use cases for Sectigo IoT certificates? Ideal for large-scale device identity management scenarios such as industrial IoT, smart home, and connected vehicles. Sectigo IoT Manager supports MQTT and TLS mutual authentication with API-based bulk certificate management, already serving millions of IoT devices—see the website security checklist.