Wildcard SSL certificates
Encrypt and protect your website in a convenient and cost-effective way with Sectigo Wildcard SSL certificates. These SSL/TLS certificates allow you to secure your primary domain and an unlimited number of subdomains under your primary domain, all with just one certificate. For instance, www.example.com, login.example.com, and mail.example.com do not need separate certificates but rather one Wildcard SSL certificate.
Wildcard DV SSL
Ideal for blogs and sites that don't gather customer data
- Fastest issuance
- 24/7 expert support
- Unlimited server licenses
- 30-day money back guarantee
- Compatible with all leading web and mobile browsers
- $500,000 SSL certificate warranty
- Includes Sectigo Trust Seal
Wildcard OV SSL
Ideal for business sites and login screens
- Validates organization
- 24/7 expert support
- Unlimited server licenses
- 30-day money back guarantee
- Compatible with all leading web and mobile browsers
- $1,000,000 SSL certificate warranty
- Includes Sectigo Trust Seal
Certificates Are Expiring Fast. Are You Ready?
The industry is cutting certificate lifespans by nearly 90%. If you're buying certificates one at a time, this changes what you have to do and how often you have to do it. What this means for you:
- You'll buy more often. Every certificate you own turns into a recurring purchase, not an annual one.
- You'll validate more often. Validation reuse drops to 10 days by 2029. You'll re-prove ownership every time.
- You'll have less room for error. One missed renewal means browser warnings, a down site, and lost sales. 81% of organizations already hit a certificate outage in the past year.
- Spreadsheets and calendar reminders won't keep up. What was a once-a-year task becomes a standing operational job.
Today you're buying a certificate that expires in 200 days. By 2029, it'll expire in 47.
That means more certificates to buy, more renewals to track, and more chances to miss one and take your site offline. Automation is how you stop managing certificates one at a time.
200 Days
~2 Renewals/Year
100 Days
~4 Renewals/Year
47 Days
~12 Renewals/Year
You don’t have to manage this manually.
Sectigo Certificate Manager finds every certificate you own, renews them automatically, and alerts you before anything expires, so your first install is your last.
Trusted leader in SSL/TLS certificates
Included with every SSL certificate:
30-day money back guarantee
Secure your site with confidence! 30-day money-back guarantee on all your purchases.
24/7 expert support
Get round-the-clock assistance from our SSL experts.
Unlimited server licenses
Enjoy seamless integration with unlimited server licenses.
Sectigo Trust Seal
Boost trust with every certificate by adding the Sectigo Trust Seal.
Validation requirements
This type of digital certificate delivers full 256-bit encryption across all subdomains and servers under your main domain. Sectigo, one of the longest-running commercial Certificate Authorities, offers Wildcard SSL certificates in both Domain Validated (DV) and Organization Validated (OV) options.
The time required to validate and issue a wildcard SSL certificate depends on the validation level you choose. DV SSL certificates typically issue within minutes, while OV SSL certificates can take 1-5 days. These steps and tips will help guide you through the validation process.
Best practice: DNS-Based DCV (recommended)
We strongly recommend using DNS-based validation. It’s secure, reliable, and easier to automate in preparation for shorter certificate lifespans. There are two supported DNS-based options:
1. DNS CNAME-based DCV
A CNAME record is added to your DNS pointing to a validation target provided by the certificate authority.
2. DNS TXT-based DCV (random value method)
You’ll add a TXT record containing a random value to your domain’s DNS. The record should follow this format:
- Name: _pki-validation.your-domain.com
- Type: TXT
- Value: <random_value_provided>
The random value is unique to your order and valid for 30 days. Once added, Sectigo will check for the presence of the TXT record to confirm domain control.
Alternative: Email-based DCV (pre-approved addresses only)
Email-based authentication remains supported but is now limited to the following pre-approved addresses. WHOIS-based email addresses are no longer accepted as of June 15, 2025:
- admin@your‑domain.com
- administrator@your‑domain.com
- webmaster@your‑domain.com
- hostmaster@your‑domain.com
- postmaster@your‑domain.com
We will send an authorization email to one of these addresses. Once you respond and confirm ownership, the certificate can be issued within minutes of a completed order.
Organization Validated or OV SSL certificates require more validation than Domain Validated (DV) certificates but provide an extra layer of trust. With an OV certificate, we confirm the business associated with the domain name is registered and legitimate by checking details such as the business name, location, address, and incorporation or registration information. This makes the OV certificate a more suitable option for public-facing websites that represent companies or organizations. OV's are usually used by corporations, governments, and other entities that want to provide an extra layer of confidence to their website visitors. OV requirements for an organization include:
- Domain ownership/authentication
- Organization authentication
- Locality presence
- Telephone verification (organization phone number found on an online database)
- Final verification phone call
For legitimate organizations, the SSL validation process is simple and quick. Remember, an OV certificate differentiates legitimate businesses from pretenders—including scammers and hackers.
OV SSL certificate for an individual requires the identity and address to be validated on the certificate. Individual identity is verified by the applicant providing one of the following documents:
- Legible copy of a government-issued photo ID. Such as a valid driver's license, passport, military ID, or National ID
- Copy of a recent major utility bill (i.e. power bill, water bill, etc.)
- Copy of a bank or credit card statement
Intuitive dashboard
In our customer dashboard, you'll be able to view all products you have with Sectigo, view their lifecycle status, issue or reissue, and renew expiring certificates, saving you time and fear that an expired certificate may down your site at an unexpected time.
FAQs
Have another question?
Reach us by chat in the lower-right corner.
A wildcard certificate is a single certificate that will protect a primary domain and also secure an unlimited number of subdomains under the primary domain. A subdomain is a subdivision of a base domain, and in a URL comes before the main domain name. These SSL certificates are available in both DV and OV validation options.
A wildcard SSL from Sectigo® starts at $460 for the DV option when you choose a six-year subscription and the OV option starts at $739.16 for the six-year subscription.
While the wildcard type secures all subdomains under one single domain, a multi-domain certificate (also known as UCC or SAN SSL) secures up to 250 unique domains and their subdomains with one certificate. Compare the different features of all types of certificates here.
Multi‑year certificates provide upfront savings and predictable pricing while helping you stay ahead of industry‑mandated certificate lifespan changes.
Due to evolving browser and CA requirements, SSL/TLS certificates are now issued with shorter validity periods (currently up to 199 days), which means certificates must be reissued more frequently within the subscription term. With a multi‑year plan, you lock in today’s lowest price and maintain uninterrupted coverage for the full subscription period—without needing to repurchase each time a certificate is reissued.
As certificate lifespans continue to shrink toward the upcoming 47‑day standard, multi‑year subscriptions offer a simpler, more cost‑effective way to manage frequent reissuance while maintaining continuous security.
Learn more about the industry’s move to 47‑day SSL certificates: https://www.sectigo.com/47-day-ssl
Why organizations rely on Sectigo
The market leader
Sectigo is the market leader in SSL/TLS certificates, DevOps, IoT, enterprise-grade public key infrastructure (PKI) management, and multi-layered web security.
Over 700,000 customers
Businesses worldwide rely on Sectigo for solutions ranging from SSL certificates to our award winning certificate management platform, Sectigo Certificate Manager.
Security at scale
Sectigo has issued over 1 billion certificates and currently secures more than 57 million active certificates, ensuring trust and security worldwide.
24/7 full service support
Offering customers 24/7 support and a money-back guarantee, Sectigo is the obvious choice for best-in-class customer service.
Need assistance?
Contact our team for help with your purchase or issuing your certificate.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
