Websites & Email · Wildcard · a site and every subdomain

Stop buying a certificate every time you add a subdomain

One certificate covering every subdomain of your domain — including the ones you have not thought of yet, with no reissue when you add them. It works out cheaper than buying singles from around the third subdomain, and it removes four renewal dates from your calendar.

  • Unlimited subdomains
  • Covers the bare domain too
  • No reissue to add one
  • One renewal date
  • 28 certificates, from $79

What a visitor sees

Not secure shop.acme.com

A subdomain your single-domain certificate does not carry. The site is up, the server is fine, the certificate is valid — and the browser stops the visitor anyway.

shop.acme.com Secure

Covered by *.acme.com, along with every other subdomain you run and the ones that do not exist yet.

4.5 out of 5 from 431 published reviews left on the 28 certificates listed here. Every one of them is on its own product page, unedited — we do not hand-pick them.
  • The authority issues it, not usComodo, Sectigo, GeoTrust, Thawte, Certum and RapidSSL sign your certificate. Identical file, identical trust, lower price.
  • 10 days to change your mindA full refund or a swap to a different certificate. SSL certificates only. Read the policy.
  • Wrong one? We will say so firstSend us the hostnames before you buy and we will name the cheapest certificate that covers them — including when that is not the one you were about to order.
  • Comodo
  • Sectigo
  • Geotrust
  • Thawte
  • Certum
  • Rapidssl
  • Lowest price guaranteeFind the same certificate cheaper anywhere and we match it.
  • Free unlimited reissuesChange a hostname or move host mid-term at no cost.
  • Unlimited serversOne file on the load balancer, the app servers and staging.
  • Free installation supportcPanel, IIS, Nginx, load balancers and appliances.

What the star actually matches

A wildcard covers one label in the position the star occupies, on one registered domain. That catches every subdomain you will realistically run, and the bare domain alongside them. It does not stretch a level deeper, and it does not cross to a second domain — two limits worth establishing now rather than at install time.

Ordered for *.acme.com

Covered by this certificate

  • acme.com
  • www.acme.com
  • shop.acme.com
  • blog.acme.com
  • staging.acme.com
  • anything-you-add-later.acme.com

Not covered — you would need

Is this the right one for you?

The most expensive mistake on this site is buying the wrong shape and finding out at install time. Two lists, and the second one is a route out rather than a dead end.

Buy this if

  • You already run three or more subdomains, or expect to
  • New subdomains appear without much notice — per-client, per-region, per-environment
  • You would rather diary one renewal than five
  • Development, staging and production all need covering
  • A control panel or load balancer serves several hostnames from one certificate file

Look at this instead if

Why this usually turns out cheaper than it looks

The sticker price is higher than a single certificate, so the argument has to be made on the whole estate rather than on one line item. It normally makes itself.

  • The crossover is about three subdomainsAt our prices a wildcard costs roughly what three separate certificates do, and every subdomain after that is free. Most sites that have two subdomains today have five within a year.
  • A forgotten subdomain is a warning, not a gapThe moment somebody stands up help.acme.com or a new regional site, an estate of single certificates is one hostname short and one visitor away from a browser interstitial. A wildcard covers it before anybody files a ticket.
  • Reissues cost you an afternoon, not moneyAdding a name to a single-domain certificate is not possible; adding one to a multi-domain certificate is a reissue and a redeploy. Under a wildcard neither happens — the certificate already covers it.
  • Five renewal dates is how estates lapseCertificates do not expire at a convenient hour, and the ones that catch people out are always the forgotten staging box that turns out to be public. One certificate is one date.

If you would rather not read a price list

Three out of the 28 below, chosen for the three reasons people actually buy on. Every price, warranty and specification here is read from the catalogue, so it is what the cart will charge.

  • Our pick

    Certum Commercial Wildcard SSL Certificate

    The cheapest publicly trusted wildcard we sell, from an authority in the same trust stores as everything above it, and with a warranty far larger than the entry-level brands carry.

    • Domain validated · issued in minutes
    • One domain, unlimited subdomains*.example.com and example.com
    • €400,000 warranty
    • Unlimited servers · free unlimited reissues
    $79 $158 save 50% per year, before term discounts
    Full specification →
  • Most chosen

    Comodo PositiveSSL Wildcard Certificate

    The wildcard most of our customers buy. Minutes to issue, a name every hosting panel recognises, and unlimited free reissues for the whole term.

    • Domain validated · issued in minutes
    • One domain, unlimited subdomains*.example.com and example.com
    • $10,000 warranty
    • Unlimited servers · free unlimited reissues
    $121.98 $162.64 save 25% per year, before term discounts
    Full specification →
  • With your company name

    Certum Trusted Wildcard SSL Certificate

    The same unlimited subdomain coverage with organisation validation on top, so your registered company name is inside the certificate where an auditor can read it.

    • Organisation validated · issued in 1-3 days
    • One domain, unlimited subdomains*.example.com and example.com
    • €400,000 warranty
    • Unlimited servers · free unlimited reissues
    $129 $398 save 68% per year, before term discounts
    Full specification →

Every one we sell, cheapest first

All 28 of them, with the specifications that genuinely differ side by side. Any price is a buy button — it opens the same order card as the product page.

Certificate Validation Covers Warranty Issued in From
Certum Commercial Wildcard SSL Certificate Certum DV One domain, unlimited subdomains*.example.com and example.com €400,000 Minutes $79 $158
Comodo PositiveSSL Wildcard Certificate Comodo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Minutes $121.98 $162.64
Sectigo PositiveSSL Wildcard Certificate Sectigo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Minutes $121.98 $162.64
Certum Trusted Wildcard SSL Certificate Certum OV One domain, unlimited subdomains*.example.com and example.com €400,000 1-3 Days $129 $398
Comodo EssentialSSL Wildcard Certificate Comodo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Immediate $131.61 $175.48
Sectigo EssentialSSL Wildcard Certificate (sub-Domain) Sectigo DV One domain, unlimited subdomains*.example.com and example.com $10,000 Immediate $131.61 $175.48
RapidSSL Wildcard Certificate RapidSSL DV One domain, unlimited subdomains*.example.com and example.com $10,000 Minutes $139.95 $269
Comodo Wildcard SSL Certificate (DV) Comodo DV One domain, unlimited subdomains*.example.com and example.com $250,000 Minutes $198 $449
Sectigo Wildcard SSL Certificate (DV) Sectigo DV One domain, unlimited subdomains*.example.com and example.com $250,000 Minutes $198 $449
GeoTrust QuickSSL Premium Wildcard GeoTrust DV One domain, unlimited subdomains*.example.com and example.com $500,000 Minutes $245 $479
Thawte SSL123 Wildcard Certificate Thawte DV One domain, unlimited subdomains*.example.com and example.com $500,000 Minutes $245 $745
PositiveSSL Multi-Domain Wildcard SSL Certificate Comodo DV Several domains, every subdomain3 names included, up to 247 $10,000 Minutes $267.24 $356.32
Sectigo PositiveSSL Multi-Domain Wildcard SSL Certificate Sectigo DV Several domains, every subdomain3 names included, up to 247 $10,000 Minutes $267.24 $356.32
Comodo InstantSSL Premium Wildcard (OV) Comodo OV One domain, unlimited subdomains*.example.com and example.com $250,000 1-3 Days $274 $449
Sectigo Premium Wildcard (OV) Sectigo OV One domain, unlimited subdomains*.example.com and example.com $250,000 1-3 Days $274 $449
Wildcard SSL (Sub-Domains) Certificate by Thawte Thawte OV One domain, unlimited subdomains*.example.com and example.com $1,250,000 1-3 Days $376 $499
Comodo Multi-Domain Wildcard SSL Certificate Comodo OV Several domains, every subdomain3 names included, up to 247 $250,000 1-3 Days $405.27 $540.36
Comodo UCC Wildcard Certificate (Unified Communications) Comodo OV Several domains, every subdomain3 names included, up to 247 $250,000 1-3 Days $405.27 $540.36
Sectigo Multi-Domain Wildcard SSL Certificate Sectigo OV Several domains, every subdomain3 names included, up to 247 $250,000 1-3 Days $405.27 $540.36
Comodo UCC Wildcard Certificate (Unified Communications) 1 Comodo OV Several domains, every subdomain3 names included, up to 247 $250,000 1-3 Days $405.27 $540.36
Thawte SSL Web Server Multi-Domain Wildcard Certificate Thawte OV Several domains, every subdomain3 names included, up to 97 $1,250,000 1-3 Days $592 $1,696
GeoTrust True BusinessID Wildcard SSL Certificate GeoTrust OV One domain, unlimited subdomains*.example.com and example.com $1,250,000 1-3 Days $698 $873
GeoTrust True BusinessID Multi-Domain Wildcard GeoTrust OV Several domains, every subdomain3 names included, up to 97 $1,250,000 1-3 Days $1,056 $3,247
Comodo Enterprise Pro Wildcard SSL Certificate Comodo OV One domain, unlimited subdomains*.example.com and example.com $1,500,000 1-3 Days $1,693.50 $2,258
Sectigo Enterprise Pro Wildcard SSL Certificate Sectigo OV One domain, unlimited subdomains*.example.com and example.com $1,500,000 1-3 Days $1,693.50 $2,258
Symantec Secure Site Wildcard with Anti-Malware Scan Symantec OV One domain, unlimited subdomains*.example.com and example.com $1,500,000 1-3 Days $1,775 $1,999
Symantec Secure Site Multi-Domain Wildcard Certificate Symantec OV Several domains, every subdomain2 names included, up to 98 $1,500,000 1-3 Days $2,697 $4,397
Symantec Secure Site Pro Wildcard with Anti-Malware Scan Symantec OV One domain, unlimited subdomains*.example.com and example.com $1,500,000 1-3 Days $4,805 $4,975

Prices are for one year. Most of these can be bought for two, which is the longest term the industry rules allow to be sold — the saving is shown on the product page.

How to choose between them

Once you are on the right page the remaining decision is small, and it comes down to three things in this order.

  1. Whether you need the company name in it

    Most wildcards here are domain validated and issue in minutes. A handful are organisation validated, take one to three working days, and put your registered company name inside. That is the only functional difference and it is the one worth thinking about.

  2. How many hostnames beyond the wildcard

    Some of these carry SAN slots as well as the star, which lets one file cover *.acme.com and a handful of unrelated names. If your estate has a couple of outliers, that combination is cheaper than a second certificate.

  3. Warranty, if anyone has specified one

    Warranties here run from ten thousand to a million and a half. It rarely matters, but when a contract or an insurer names a figure it is the only specification on this page that varies enough to matter.

Questions we get asked before people order

Does a wildcard cover the bare domain as well?

Yes. Every wildcard here carries both *.acme.com and acme.com, so you do not need a second certificate for the apex. It is worth confirming after install with the SSL checker, because a handful of older server configurations serve only one of the pair.

Will it cover eu.shop.acme.com?

No. The star matches exactly one label, so *.acme.com covers shop.acme.com but not eu.shop.acme.com. Most estates never hit this; the ones that do are usually running regional or per-customer subdomains. A multi-domain wildcard, or a second wildcard for *.shop.acme.com, is the fix.

How many subdomains can I put on it?

As many as you like, on as many servers as you like, and you never tell us or the authority about them. That is the practical difference between a wildcard and a multi-domain certificate: one covers a pattern, the other covers a list.

Can I add a completely different domain to it?

Not to a plain wildcard. Some of the certificates listed here carry SAN slots alongside the star and can take extra names; the rest cannot. If you know you need both, the multi-domain wildcard page is the shape you want.

Is one wildcard riskier than several single certificates?

It is one private key protecting more hostnames, so if that key leaks the exposure is wider. In practice the risk that actually bites people is the opposite one — an estate of certificates nobody is tracking, one of which quietly expires. Keep the key on the servers that need it and take the wildcard.

Can I use the same file on several servers?

Yes. Every certificate on this page is licensed for unlimited servers, so the same file goes on the load balancer, the app servers and the staging box at no extra cost.

The other ways to cover a website

Two of these answer what the certificate has to cover and three answer how much you have to prove about who you are. Every one of them is a full price list like this page.

Send us the hostname list and we will price it

A line about what the site does and which names it answers on is enough. We come back with the cheapest certificate that genuinely covers it — including when that is one certificate instead of the four you were about to buy. No obligation and no sales call.