Wildcard TLS/SSL

One certificate. Unlimited subdomains. Effortless coverage.

A Wildcard TLS/SSL certificate secures your main domain and every first-level subdomain under it with a single certificate — *.yourdomain.com covers shop, api, mail, and hundreds more. Available with DV or OV validation. Compatible with ACME automation.

Key benefits

Unlimited subdomain coverage

Cover every first-level subdomain — now and in the future — with a single certificate.

Cost-efficient at scale

One certificate replaces many individual single-domain certs for the same domain.

Single renewal point

Renew one certificate to maintain coverage across all subdomains.

ACME-compatible

Automate wildcard issuance and renewal via ACME DNS-01 challenge (RFC 8555).

OV option available

Add organization identity to the certificate — org name appears in certificate details.

Purchase & Pricing

1 Select duration

Order Summary

ProductOV Wildcard SSL
ValidationOrganization Validation (OV)
Duration1 Year
Warranty$250,000
Rate$399.00/yr
Total$399.00
Secure checkout on SSL.com

Compatibility

WebTrust audited

Annual BDO audits for CA, BR SSL, and Network Security.

All major trust stores

Trusted in all major browsers and operating systems.

Universal server support

Apache, Nginx, IIS, AWS, GCP, Azure, and all major CDNs.

SSL.com is a publicly trusted Certificate Authority, audited annually under WebTrust standards, and included in all major browser and OS trust stores.

Frequently asked questions

Yes — when you purchase a wildcard for *.yourdomain.com, SSL.com includes yourdomain.com as a SAN at no extra cost.
No. A standard wildcard only covers one level down. For sub-subdomain coverage, use a Multi-Domain (SAN) certificate or a second wildcard for that level.
The CA/B Forum prohibits EV for wildcard certificates. Use an EV Single Domain certificate for sites where EV identity is important.
Yes, using the DNS-01 challenge. Your DNS provider must support programmatic TXT record updates. Most major DNS providers are supported by Certbot and ACME.sh.
Unlimited — any subdomain one level below the wildcard base domain is automatically covered.

Secure your domain and all its subdomains

Get your Wildcard TLS/SSL certificate today

Related products

Single Domain TLS/SSL

Secure exactly one domain or subdomain, including EV.

Multi-Domain (UCC/SAN)

Multiple different domains in one certificate.

ACME / CLM

Automate wildcard certificate renewals via DNS-01.

We’d love your feedback

Take our survey and let us know your thoughts on your recent purchase.

Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognizing you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

For more information read our Cookie and privacy statement.

3rd Party Cookies

This website uses Google Analytics & Statcounter to collect anonymous information such as the number of visitors to the site, and the most popular pages.

Keeping these cookies enabled helps us to improve our website.

Show details