Wildcard SSL

Secure your subdomains with one Wildcard SSL certificate

A Wildcard SSL certificate secures your domain and unlimited first-level subdomains, so blog, shop and app are covered the moment they go live.

Get a Wildcard SSL Help me choose

Available with DV or OV validation · New subdomains covered without a reissue

Choose the right Wildcard SSL for your website

Both cover your domain and unlimited first-level subdomains. The difference is whether the certificate also carries your verified company details.

Recommended

DV SSL Wildcard

One domain and its first-level subdomains

Blogs, shops and apps running under one domain, with new subdomains covered as you add them.

€169.00/year
Secure my site

Billed monthly.

  • Covers the domain and one level of subdomains?
  • New subdomains protected the moment they go live?
  • One certificate instead of one per subdomain?
  • No documents and no company checks?
  • Validated by DNS or email?
  • Specifications
  • Validation: Domain validated (DV)?
  • Covers: 1 domain + first-level subdomains?
  • Encryption: up to TLS 256-bit?
  • Warranty: $50,000 ?
  • Issuance: within minutes?
  • Validation
  • Validation: Domain validated (DV) ?

OV SSL Wildcard

Verified company across your subdomains

Business sites running several subdomains from one brand, for example blog.mybrand.com and shop.mybrand.com.

€479.00/year
Secure my site

Billed monthly.

  • Company name and location inside the certificate ?
  • Covers the domain and one level of subdomains?
  • New subdomains protected the moment they go live?
  • One certificate instead of one per subdomain?
  • Validated by DNS or email ?
  • Specifications
  • Validation: Organization validated (OV) ?
  • Covers: 1 domain + first-level subdomains?
  • Encryption: up to TLS 256-bit?
  • Warranty: $250,000?
  • Issuance: up to 2 business days?
  • Validation
  • Validation: Organization validated (OV)?

Prices exclude 21% vat and Terms & Conditions apply.

One certificate, every subdomainCovers the domain and one level beneath it
Installed on your serverWe generate the CSR and complete the install
Reissue handled for youReissued every 199 days and reinstalled for you
Trust seal includedDisplay a recognised Sectigo seal on your site
30-day money-back guaranteeFull refund inside the first 30 days
One certificate, every subdomainCovers the domain and one level beneath it
Installed on your serverWe generate the CSR and complete the install
Reissue handled for youReissued every 199 days and reinstalled for you
Trust seal includedDisplay a recognised Sectigo seal on your site
30-day money-back guaranteeFull refund inside the first 30 days

DV or OV validation

Both cover your domain and every subdomain one level beneath it. DV confirms control of the domain and issues quickly. OV adds a check of the company behind it and records your verified details in the certificate.

Compare all SSL types

Why businesses choose Wildcard SSL with Pladinum

One certificate covers your domain and every subdomain one level beneath it. These are the parts we take on so you do not have to.

Secure unlimited subdomains with one certificate
Protect your primary domain and all current and future subdomains (e.g. shop., app., api.) without purchasing additional SSL certificates.
Consistent encryption across all services
Ensure every subdomain is protected with consistent, strong TLS encryption, preventing weak links across login portals, APIs, admin panels, and customer interfaces.
Reduce costs and simplify SSL management
One Wildcard SSL replaces multiple single-domain certificates—lowering costs, renewals, and administrative overhead as your infrastructure grows—without increasing complexity.
Available with DV or OV validation
Choose fast domain validation or verified business identity—without EV complexity.
Scale instantly without reissuing certificates
Launch new subdomains at any time without reissuing or reinstalling SSL—ideal for fast-moving teams, SaaS platforms, and microservices.
Ideal for complex, modern infrastructures
Perfect for eCommerce platforms, SaaS applications, agencies, and enterprises managing multiple environments under one trusted brand identity.

What is verified during Wildcard SSL validation

The security and identity checks required before issuing a Wildcard SSL certificate

Domain Validation confirms you control the primary domain. No company documents and no identity checks.

DNS validation, recommended.
You add a record to your domain and Sectigo detects it automatically. Two options: a CNAME record pointing to a validation target Sectigo provides, or a TXT record at _pki-validation.your-domain.com containing a random value unique to your order and valid for 30 days. DNS is the method we recommend, because it is the easiest to repeat as certificate lifespans shorten.

Email validation, alternative.
Sectigo sends an authorisation link to one address you choose from five permitted role addresses at your domain:admin@ · administrator@ · webmaster@ · hostmaster@ · postmaster@WHOIS contact addresses have not been accepted since 15 June 2025, so one of the five must be reachable.

File upload validation is not available on wildcard certificates.
Issued within minutes of successful validation.

Organisation Validation adds a check of the company behind the domain, so your verified legal entity is recorded in the certificate.Five things are confirmed before issue:

Domain control, by DNS or email as above.

Company registration, that your official name, registered address and country appear as active in a government or commercial registry.

Physical presence, a verifiable address matching independent third-party records.

Telephone number, a business line listed for your company in public or commercial databases.

Verification call, placed to that number to confirm you are authorised to request the certificate.

Issued in 1 to 2 business days once the checks are complete. We prepare the documents and deal with the authority on your behalf.

Organisation Validation is also available to individuals trading under their own name, including freelancers, consultants and sole traders without a registered company. The certificate verifies the person behind the site rather than a company.Three things are confirmed:

Domain control, by DNS or email as above.

Identity, through a legible copy of a government-issued photo ID: passport, driving licence, national identity card or military ID.

Address, through a recent utility bill or a bank or credit card statement.

Documents must be current, clearly readable, and match the details given when ordering.

Andreas García Fernández

Security Analyst

Frequently asked questions

If your answer isn't here, ask us. Our engineers reply personally, usually within hours.

A Wildcard certificate secures one primary domain and its first-level subdomains with a single certificate. One Wildcard protects example.com, shop.example.com and api.example.com, along with any new first-level subdomain you create later.

Yes, at one level. There is no limit on how many first-level subdomains you secure and no cost per subdomain. Deeper names such as eu.shop.example.com sit two levels down and need their own certificate.

Encryption is identical. DV confirms you control the domain and issues within minutes. OV additionally verifies the company behind the domain and records your legal entity in the certificate, taking 1 to 2 business days.

Choose Wildcard if you run more than one subdomain today or expect to add more. A single certificate replaces one per subdomain, with one renewal date instead of several.

Wildcard covers one domain and its first-level subdomains. Multi-domain covers separate domain names, up to 210 on ours, such as example.com, example.net and example.es. Choose Wildcard for subdomain-heavy sites and Multi-domain for several distinct domains.

Yes, provided they run as first-level subdomains. It is a common choice for dashboards, client portals, login systems and internal tools, giving every service the same TLS encryption.

DV is typically issued within minutes of domain validation. OV takes 1 to 2 business days while the company checks are completed.

Yes. The same Wildcard certificate can be installed wherever your subdomains are hosted, so subdomains split across servers stay covered.

Yes. Encryption is the same as any other certificate. OV is the stronger choice for a store, because customers checking the certificate see a verified company name rather than a domain alone.

HTTPS is a confirmed ranking signal and a Wildcard enables it across every subdomain at once, which also avoids mixed-content problems. Ranking does not vary by validation level.

New first-level subdomains are covered as soon as they go live. No new order, no reissue and no second validation.

Certificates are now issued for a maximum of 199 days and reissued for the remainder of your term. Reissue is automatic, and we reinstall the new certificate when your site is hosted with us.

Scale instantly without reissuing certificates

One Wildcard SSL certificate covers your domain and every subdomain one level beneath it, with a single renewal date and installation included when your site is hosted with us.

Get a Wildcard SSL