SSL Certificates — trusted security for your website
Encrypt all traffic between your users and your website with TLS 1.3 / 256-bit. Official reseller of Sectigo, DigiCert, GlobalSign, RapidSSL, AlphaSSL in Vietnam — from free DV to enterprise EV.
Browser after installing SSL
- SAN domain
- yourcompany.com · www.yourcompany.com
- OCSP stapling
- Enabled
- HSTS preload
- Registered
Choose the right SSL for your website
From basic DV certificates for personal blogs to enterprise EV showing your company name — BKNS covers every validation level per CA/Browser Forum standards.
DV SSL
Domain Validation — verifies domain ownership via DNS or email.
OV SSL
Organization Validation — legally verifies your business via documentation.
EV SSL
Extended Validation — highest assurance per CA/Browser Forum standards.
Wildcard
Secures your main domain and every subdomain at the same level under one certificate.
Prices exclude VAT
5 trusted certificate authorities
4 steps to a secure website
Fully online issuance process — BKNS provides lifetime technical support, no specialist knowledge required.
Choose a plan & generate CSR
Select the SSL type that fits your website. BKNS helps you generate your CSR (Certificate Signing Request) for free via the portal.
Validate domain / business
DV: validate via DNS or email. OV/EV: submit business legal documents (business registration certificate, phone invoice).
Receive certificate & install
BKNS delivers the .crt file via portal and email. Installation guides for cPanel, Plesk, DirectAdmin, Nginx, IIS, Apache.
Monitor & renew
The system automatically notifies you 30 days before expiry. Fast renewal support, keeping your existing certificate serial.
4 SSL types — where do they differ?
Quick comparison of SSL types by validation level, issuance time, warranty amount and browser display.
| Criterion | DV — Basic | OV — Business | EV — Premium | Wildcard |
|---|---|---|---|---|
| Validation level | Domain | Business legal | Extended legal | Domain + subdomains |
| Issuance time | Automated | 1–3 days | 5–10 days | 2 hours – 2 days |
| Company name display | — | ✓ On padlock click | ✓ In URL bar | — |
| Maximum warranty | $10,000 | $250,000 | $1,750,000 | $500,000 |
| Encryption | 256-bit / TLS 1.3 | 256-bit / TLS 1.3 | 256-bit / TLS 1.3 | 256-bit / TLS 1.3 |
| Subdomain coverage | 1 (main + www) | 1 (main + www) | 1 (main + www) | Every subdomain at one level |
| Trust seal | — | ✓ | ✓ Dynamic | ✓ |
| Best suited for | Blogs, landing pages | Business websites, e-commerce | Banking, fintech | Multi-subdomain SaaS |
| Starting price | 159,000 VND/year | 1,620,000 VND/year | 3,458,000 VND/year | 1,900,000 VND/year |
Why your website needs SSL today
Full data encryption
Accounts, passwords and credit card details are encrypted with 256-bit between the user and server — impossible to intercept.
Boost Google SEO ranking
Google publicly prioritises HTTPS websites in search rankings. Browsers have shown a "Not secure" warning for non-SSL sites since 2018.
Increase conversion rate
The padlock icon and company name (EV) build customer trust — especially critical for e-commerce and online payments.
PCI-DSS compliance
SSL is a mandatory requirement of the PCI-DSS standard — required for any website processing bank card information.
Installation & renewal support
BKNS engineers install SSL for free on all platforms: cPanel, Plesk, Nginx, IIS, Apache, NodeJS, Tomcat.
Broad browser and device compatibility
SSL from Sectigo, DigiCert and GlobalSign is trusted by all modern browsers, operating systems and mobile devices.
Not sure which SSL to choose?
The BKNS advisory team will analyse your website and recommend the SSL plan that best fits your business model.
All your SSL questions answered
Can''t find an answer? Contact a BKNS security specialist →
Yes. Let''s Encrypt is a CA trusted by all browsers, using the same 256-bit encryption as paid SSL. Limitations: DV only (domain validation), no company name display, no warranty coverage.
Every BKNS hosting plan gets a free Let''s Encrypt certificate, issued and installed by BKNS, including Wildcard. If you need an OV or EV certificate, buy one separately from DigiCert, Sectigo or GeoTrust; BKNS installs it for free.
OV: shows the company name when the user clicks the padlock icon. EV: previously showed a green bar with the company name in the URL — most browsers now display this via padlock click too. Both include a dynamic trust seal.
A Wildcard certificate covers one subdomain level only. *.yourcompany.com covers shop.yourcompany.com, blog.yourcompany.com, api.yourcompany.com and more, but not a.b.yourcompany.com. If you need several levels protected, BKNS issues an additional certificate for each level.
Barely. With TLS 1.3 + HTTP/2 (enabled by default at BKNS), HTTPS is typically faster than HTTP thanks to multiplexing and OCSP stapling.
BKNS supports free transfers — just provide your existing .crt and .key files. Our engineers will install and maintain the certificate until expiry, then renew it with BKNS at a preferential rate.