A wildcard certificate is issued to *.yourdomain.com and secures every subdomain on that level, such as shop, blog or mail, with one certificate. New subdomains are covered without a new order.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
Not offered for this billing cycle; the price shown is for its default cycle.
The CA checks that you control the domain. Issued quickly, no organization details in the certificate.
Learn moreThe CA also verifies that your organization exists and asked for the certificate.
Learn moreThe most detailed organization checks, defined by the CA/Browser Forum EV Guidelines.
Learn morewww, shop, blog, mail and any new name on the same level share one certificate.
Track a single expiry date and reissue instead of one certificate per subdomain.
A wildcard key unlocks every subdomain, so limit where it is installed.
The schedule was adopted by the CA/Browser Forum in ballot SC-081v3. It applies to every publicly trusted TLS certificate, whichever brand you choose.
Until 14 March 2026
The longest validity publicly trusted TLS certificates could have.
From 15 March 2026
Today’s limit under the CA/Browser Forum Baseline Requirements. Domain validation can be reused for up to 200 days.
From 15 March 2027
Certificates and domain validation reuse both drop to 100 days.
From 15 March 2029
Certificates last at most 47 days and domain validation can be reused for only 10 days, so renewal has to be automated.
Pick the product, location and billing cycle that fit your project.
Review your cart and pay with one of the available payment methods.
We email your login details as soon as the service is ready.
Open a support ticket from the client area and follow every reply.
Malware scanning and removal plans from SiteLock.
Uptime, performance and SSL certificate checks with alerts.
Web hosting for websites, blogs and online shops, with your choice of control panel.
Learn moreLiteSpeed hosting with LSCache, Redis and your choice of control panel.
Learn moreA certificate for *.example.com covers every name on exactly one level below example.com, such as shop.example.com and mail.example.com. Whether the bare domain example.com is included depends on the product; check the product details before ordering.
No. *.example.com does not cover eu.shop.example.com. Each deeper level needs its own wildcard, for example *.shop.example.com.
Domain validated wildcards (RapidSSL Wildcard and GeoTrust QuickSSL Premium Wildcard) and an organization validated wildcard (GeoTrust True BusinessID Wildcard). EV certificates cannot be wildcards.
Technically the same certificate and key can be installed wherever the subdomains are hosted. Every copy of the private key is a copy to protect, so keep the number of servers small and replace the key if a server is compromised.
Since 15 March 2026 a publicly trusted TLS certificate can be valid for at most 200 days. The limit drops to 100 days on 15 March 2027 and to 47 days on 15 March 2029 (CA/Browser Forum ballot SC-081v3). Longer purchase terms are subscriptions in which the certificate is reissued.
Every plan lists the billing cycles it is offered with. Switch the cycle above the plans to compare prices; longer cycles show the saving against monthly billing when there is one.
Choose one of the payment methods offered at checkout. Every invoice also stays available in the client area, where you can pay it online.
Your service appears in the client area as soon as it is set up. From there you can manage it, pay invoices and open support tickets.
Send us a message and our team will help you choose the right service.
