Enterprise SSL/TLS certificates, worldwide
SSL StoreCertificate Authority Reseller
Home›Guides›Choosing a certificate
Choosing a certificate

Wildcard SSL Certificates Explained

5 min read · Updated 22 Oct 2026

A wildcard certificate for *.yourdomain.in secures every first-level subdomain with one certificate, including ones you add later. It's available at DV and OV levels.

What a wildcard covers

A wildcard for *.yourdomain.in secures www.yourdomain.in, mail.yourdomain.in, shop.yourdomain.in and any other first-level subdomain, including ones you add later, with no reissue needed. It covers one level only: *.yourdomain.in does not cover a.b.yourdomain.in. Whether the bare yourdomain.in is included varies by product; check the product page.

A validation note

Wildcards can't use the HTTP file validation method. Use DNS validation, the recommended method anyway. Wildcards are available at DV and OV levels; EV wildcards are not permitted under industry rules, so for EV, list each name on a multi-domain certificate.

Wildcard vs multi-domain (SAN)

Use a wildcard for many subdomains of one domain, and a multi-domain (SAN) certificate for several different domains.

Buying and setup

Enter *.yourdomain.in as the Common Name in your CSR and at setup. Everything else works like a normal certificate. If you install it on several servers, each server holds the same private key, so protect every copy.

Common questions

Does a wildcard cover the root domain?

It depends on the product; the product page says whether the bare domain is included.

Can I use one wildcard on several servers?

Technically yes, but every server then shares one key. For many servers, consider separate certificates.

How long does a wildcard last?

The same as any certificate: up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029. Plans of a year or more include free reactivation.

Browse wildcard certificates →