Secure all first-level subdomains of a domain (*.example.com) with one certificate. DV and OV options.
DV Wildcard
DV Wildcard
OV Wildcard
OV Wildcard
DV Wildcard
DV Wildcard
OV WildcardA Wildcard SSL certificate secures all first-level subdomains of a domain with one certificate. The certificate is issued in the form *.example.com, so subdomains such as www, mail, panel, api and shop all use the same certificate.
When you create a new subdomain, you do not need to buy another certificate or reissue the existing one. Wildcard is offered with domain validation (DV) and organization validation (OV); EV certificates are not available as Wildcard.
DATASSL offers 18 Wildcard SSL products; annual prices start at $40.00. Below are the best-priced DV and OV Wildcard options of each brand (per year, excl. VAT).
| Brand | DV Wildcard | OV Wildcard |
|---|---|---|
| Certum | Certum Commercial Wildcard SSL$40.00 | Certum Trusted Wildcard SSL$90.00 |
| GoGetSSL | GoGetSSL Wildcard SSL$72.00 | GoGetSSL BusinessTrust Wildcard$180.00 |
| Sectigo | Sectigo Essential Wildcard SSL$105.00 | Sectigo InstantSSL Premium Wildcard$205.00 |
| RapidSSL | RapidSSL Wildcard Plan + Automate$164.98 | — |
| GeoTrust | GeoTrust DV Wildcard Plan + Automate$299.98 | GeoTrust TrueBusinessID Wildcard$459.98 |
| Thawte | Thawte SSL 123 Wildcard$324.98 | Thawte Wildcard SSL$459.98 |
| DigiCert | — | DigiCert Wildcard SSL$813.40 |
A Wildcard certificate is ordered like a regular SSL certificate; the difference is that the CSR is generated with the asterisk domain and validation is carried out on the main domain.
When generating the CSR, enter *.example.com in the common name (CN) field. Your private key stays on your server.
Wildcard certificates are validated by email approval or DNS record; the file upload method cannot be used.
For OV Wildcard, the certificate authority also verifies your organization using official records; this step usually takes 1–3 business days.
You install the same certificate and private key on the servers that host your subdomains.
| Single-domain SSL | Wildcard SSL | Multi-domain (SAN) SSL | |
|---|---|---|---|
| Coverage | One domain | All first-level subdomains of a domain | The different domains listed in the certificate |
| New subdomain | Requires a new certificate | Covered automatically | Must be added to the certificate |
| Different domains | Not covered | Not covered | Covered |
| Validation types | DV, OV, EV | DV, OV | DV, OV, EV |
| Best for | A single site | Many subdomains | Several different sites |
You manage subdomains such as www, mail, panel and api with one certificate.
In applications that give each customer an address like customer.example.com, new addresses are covered automatically.
On infrastructure where new subdomains are created frequently, it removes the burden of buying and renewing certificates one by one.
Environments such as test, staging and dev are all encrypted with the same certificate.
At DATASSL, Wildcard SSL certificates start at $40.00 per year (excl. VAT). The lowest-priced DV Wildcard product is Certum Commercial Wildcard SSL ($40.00). OV Wildcard options start at $90.00.
There is no limit on the number of first-level subdomains: a *.example.com certificate covers addresses such as www.example.com, mail.example.com and api.example.com.
With most products, example.com is added to the certificate together with *.example.com. Coverage can vary from product to product, so check the details on the product page.
No. A *.example.com certificate does not cover second-level addresses such as a.b.example.com. That requires a separate Wildcard certificate for *.b.example.com or a multi-domain certificate.
The domain is validated through an approval link sent to an administrative email address or through a record added to DNS. Under CA/Browser Forum rules, the file upload (HTTP) method cannot be used for Wildcard certificates.
Yes. With an OV Wildcard certificate, your organization is validated as well as the subdomains, and the organization name appears in the certificate. The lowest-priced option is Certum Trusted Wildcard SSL at $90.00 per year (excl. VAT).
No. CA/Browser Forum rules do not allow Wildcard in EV certificates. To secure multiple addresses with EV, a multi-domain (SAN) EV certificate is used.
Yes, the same certificate can be installed on the different servers that host your subdomains. Server license terms can vary from product to product, so check the product page.