One certificate for a domain and all its subdomains
A wildcard is issued to *.yourdomain.com and covers every subdomain one level below it — shop, blog, api, staging. One certificate to install and one date to remember instead of six.
Per year on a one-year term. Two- and three-year terms are on the cards below.
Wildcard certificates
No introductory rate: a certificate renews at the price on this page, and that price follows the authority’s.
RapidSSL Wildcard
- Domain validation
- Covers a domain and its subdomains
GeoTrust QuickSSL Premium Wildcard
- Domain validation
- Covers a domain and its subdomains
GeoTrust True Business ID Wildcard
- Organization validation
- Covers a domain and its subdomains
What this level means
What it covers
Every name one level under the domain: shop.example.com, api.example.com. A second level, like a.b.example.com, needs its own certificate.
Why one instead of six
One request, one installation, one expiry date — and a subdomain added next month is covered the moment it exists.
What it cannot do
Extended validation is not issued for wildcards, so the strictest level a wildcard reaches is a checked organization.
Other validation levels
Domain validation
The authority checks that you control the domain, usually by email or a DNS record. Nothing about your company is verified.
Organization validation
The authority confirms your company in a public registry and writes the checked name into the certificate.
Extended validation
The full vetting procedure: legal existence, registered address, and the authority of the person who asks.
SSL questions
Does it cover the domain itself, without a subdomain?
On the certificates here the bare domain is normally included next to *.yourdomain.com. We confirm it with the authority before the order, so there is no surprise at installation.
Can I add a subdomain after the certificate is issued?
Yes, that is the point of a wildcard: a new subdomain is covered as soon as it exists, with nothing to reissue and nothing to pay.
Not sure which certificate you need?
Tell us the domain and what it has to satisfy — a payment provider, an audit, a client's checklist — and we will say which level is enough.