Comodo Wildcard SSL — One Certificate for All Subdomains
Covers the domain and any number of its subdomains, including the ones you add later. CA warranty — $50 000
Buy a wildcard for 81,90 €
A wildcard certificate is one SSL for a domain and every subdomain it has: mail.example.com, shop.example.com, api.example.com and any new ones that appear later. It is issued on domain validation in 5–15 minutes, installs on an unlimited number of servers, and reissues within the paid term are free. It fits sites whose mail, control panel, API and shop sit on separate addresses: instead of five certificates with five renewal dates you watch one. The price starts at €81.90 a year. A wildcard is never issued as EV — that is an industry rule, and extended validation across many names is covered by a multi-domain certificate.
The wildcards people order most
All of them cover an unlimited number of subdomains — validation and warranty are what differ
Comodo PositiveSSL Wildcard
| Domain validation, issued in 5–15 minutes |
| The domain and every subdomain (*.example.com) |
| CA warranty $50 000 |
| Free reissues, unlimited servers |
Sectigo SSL Wildcard
| Domain validation, issued in 5–15 minutes |
| The domain and every subdomain (*.example.com) |
| CA warranty $500 000 |
| Free reissues, unlimited servers |
Sectigo OV Wildcard SSL
| Organization validation, issued in 1–3 business days |
| The domain and every subdomain (*.example.com) |
| CA warranty $1 000 000 |
| Free reissues, unlimited servers |
Price per year. A wildcard costs more than a single-domain certificate but replaces dozens of them.
All wildcard certificates
16 options with domain validation and with organization validation
| Certificate | Validation and issuance | What it secures | Warranty | Price | |
|---|---|---|---|---|---|
| Comodo PositiveSSL Wildcard Sectigo |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $50 000 |
€81.9
per year | Order |
| EssentialSSL Wildcard (DV) Sectigo |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $10 000 |
€88.9
per year | Order |
| RapidSSL Wildcard Certificate RapidSSL |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $10 000 |
€110.9
per year | Order |
| RapidSSL Wildcard Plan + Automate RapidSSL |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $10 000 |
€115.9
per year | Order |
| InstantSSL Premium Wildcard (OV) Sectigo |
Organization validation, issued in 1–3 business days | The domain and every subdomain (*.example.com) | $250 000 |
€156.9
per year | Order |
| Comodo Wildcard SSL Certificate (DV) Sectigo |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $250 000 |
€166.9
per year | Order |
| Sectigo SSL Wildcard Sectigo |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $500 000 |
€166.9
per year | Order |
| GeoTrust QuickSSL Premium Wildcard GeoTrust |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $500 000 |
€207.9
per year | Order |
| GeoTrust DV Wildcard Plan + Automate GeoTrust |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $500 000 |
€211.9
per year | Order |
| Thawte SSL123 Wildcard Thawte |
Domain validation, issued in 5–15 minutes | The domain and every subdomain (*.example.com) | $500 000 |
€222.9
per year | Order |
| Thawte Wildcard SSL Thawte |
Organization validation, issued in 1–3 business days | The domain and every subdomain (*.example.com) | $1 250 000 |
€323.9
per year | Order |
| GeoTrust True BusinessID Wildcard GeoTrust |
Organization validation, issued in 1–3 business days | The domain and every subdomain (*.example.com) | $1 250 000 |
€385.9
per year | Order |
| Sectigo OV Wildcard SSL Sectigo |
Organization validation, issued in 1–3 business days | The domain and every subdomain (*.example.com) | $1 000 000 |
€479.9
per year | Order |
| DigiCert Wildcard SSL DigiCert |
Organization validation, issued in 1–3 business days | The domain and every subdomain (*.example.com) | $1 000 000 |
€717.9
per year | Order |
| Enterprise SSL Pro Wildcard Sectigo |
Organization validation, issued in 1–3 business days | The domain and every subdomain (*.example.com) | $1 500 000 |
€1149.9
per year | Order |
| DigiCert Secure Site Wildcard SSL DigiCert |
Organization validation, issued in 1–3 business days | The domain and every subdomain (*.example.com) | $1 750 000 |
€1807.9
per year | Order |
If you need several different domains plus their subdomains, look at multi-domain wildcards.
When a wildcard is the right choice
When there are many subdomains, or their number keeps changing
Many services on one domain
shop., blog., mail., api., admin. — each one needs HTTPS. A wildcard covers them all with a single certificate.
New subdomains appear regularly
A new subdomain works over HTTPS straight away: there is nothing to reissue.
Customer account subdomains
If every client gets an address like client1.example.com, running this without a wildcard becomes unmanageable.
What the asterisk actually covers
And what a wildcard cannot do
The domain and every subdomain on one level
A certificate for *.example.com works for example.com, shop.example.com, mail.example.com and any other name on that level.
The second level is not covered
An address such as api.v2.example.com is outside the mask: it needs a separate wildcard for *.v2.example.com.
Other domains are not covered
example.lv or example.eu do not belong to a certificate for *.example.com — that is what multi-domain certificates are for.
Servers are unlimited
The same wildcard can be installed on as many servers as you like: load balancer, mail, control panel, staging.
A wildcard or several single certificates
The right way to count is not the price of one certificate but the work around them.
- Three subdomains or more — a wildcard is usually already cheaper in plain money.
- One expiry date instead of several. No need to remember five different renewal dates.
- A new subdomain gets HTTPS immediately, with no order and no validation.
- The limit: a wildcard is never issued as EV — an industry rule. For extended validation across many names, take a multi-domain EV.
Installing on several servers
A wildcard usually ends up in several places at once: web server, mail server, control panel, load balancer. The certificate files are the same everywhere, only the format changes:
- Apache and NGINX — PEM files for the certificate, the chain and the key;
- IIS and Exchange — a PFX container with a password;
- control panels — upload through the web interface.
If doing that yourself is inconvenient, we handle it for €29.90, and every further server costs €19.90.
Order installationFrequently asked questions about wildcards
Coverage, limits and installation
An unlimited number: a certificate for *.example.com works for any name on that level, including ones created after issuance.
Yes, example.com is included together with the subdomains — you do not need a separate entry for it.
No. The asterisk covers one level only. Such names need a second wildcard, for *.v2.example.com.
Yes, OV wildcards exist from Sectigo, Thawte, GeoTrust and DigiCert. An EV wildcard does not exist — industry rules forbid it.
As many as you need. Server licences are unlimited, so one set of files goes wherever it is required.
The certificate is reissued free of charge within the paid term: you generate a new CSR and receive a new file.
Not to a wildcard, which is tied to one domain. Several domains at once are covered by a multi-domain wildcard.
Let's Encrypt does wildcards too, but only through DNS validation every 90 days. A paid one adds a warranty, support and up to three years paid ahead.