Sectigo® DV + Wildcard Information

The Sectigo® DV + Wildcard SSL Certificate secures a domain together with unlimited subdomains at a single wildcard position, written as *.example.com. It proves control of the domain through Domain Validation (DV) and protects every covered name with strong encryption.

It works well for websites built from many subdomains, and for teams that spin up new ones regularly, since a covered subdomain is protected as soon as it exists. Domain Validation involves no organization checks, so the SSL Certificate issues quickly once control of the domain is confirmed.

This SSL Certificate performs server authentication and can secure a service on any port. Common uses include websites, webmail, e-mail servers running Simple Mail Transfer Protocol (SMTP) and Internet Message Access Protocol (IMAP), Virtual Private Network (VPN) servers, remote desktop, and network appliances or routers.

More broadly, it works with any other server, software, or device that accepts an SSL Certificate to secure a connection from one point to another. For information about Client Authentication 🔗 please read about global regulated changes prior to purchase.

Secures Domain and Unlimited Subdomains 🔗	Domain Validation 🔗
USD $500,000 Relying Party Warranty 🔗	2048-bit Industry Standard SSL Certificate
Multiple Year Orders Available	Delivered Via E-Mail
Includes the Trustico® Site Seal 🔗	Unlimited Server Licenses
Optional Installation Service 🔗	Trustico® No Risk Refund Policy 🔗
Unlimited Reissue Policy 🔗	99.9% Web Browser Ubiquity 🔗

The sections below explain what the Sectigo® DV + Wildcard SSL Certificate covers, how it is validated, and how to put it in place.

Wildcard Coverage

A wildcard SSL Certificate secures unlimited subdomains at one label position. Ordering *.example.com covers any name sitting directly under example.com, such as www.example.com, shop.example.com, and blog.example.com, and the root domain example.com is included at no extra cost.

Coverage applies to the single level where the asterisk sits. A deeper name such as api.eu.example.com falls outside *.example.com and needs its own wildcard, written as *.eu.example.com. Understand Wildcard Coverage 🔗

Domain Control Validation

Domain Validation (DV) checks that you control the domain, with no organization checks, so a wildcard SSL Certificate issues quickly once that control is shown. Control is demonstrated by publishing a Domain Name System (DNS) record or by replying to an e-mail sent to one of the approved addresses for the domain.

The file-based method available for single names does not work for a wildcard, since a wildcard is not tied to one web address where a file could be found. Read about Wildcard Validation 🔗

Adding New Subdomains

A subdomain added at the covered level is protected the moment it exists, with no reissue required. You can bring a new service online under a fresh subdomain and it is secured straight away, which suits sites whose subdomain list keeps changing.

Should you reissue for another reason, the wildcard coverage carries over without change. Manage any reissue in the Trustico® Tracking System 🔗

USD $500,000 Warranty

Each Sectigo® DV + Wildcard SSL Certificate carries a USD $500,000 Relying Party Warranty that covers the secured names. It gives financial cover in the unlikely event that the Certificate Authority (CA) issues the SSL Certificate in error.

The SSL Certificate can be reissued as often as you need at no charge, for example when you rotate a Private Key or move to new servers. Review Warranty Details 🔗

Encryption and Protocols

Protection is built on a 2048-bit RSA key with 256-bit symmetric encryption, running over the Transport Layer Security (TLS) 1.2 and 1.3 protocols with SHA-256 hashing. Every covered subdomain connects over HTTPS with the padlock shown.

The encryption also supports the requirements of the Payment Card Industry Data Security Standard (PCI DSS). Compare Encryption Algorithms 🔗

Trustico® Site Seal

A complimentary Trustico® site seal comes with every order and can be shown across your subdomains to reassure visitors. It works well on payment, sign-up, and contact pages, where confidence counts most.

The seal is added with a short piece of HTML. Explore the Trustico® Site Seal 🔗

Browser Compatibility

The SSL Certificate is trusted by around 99.9% of web browsers, including Chrome, Firefox, Safari, and Edge. Mobile devices on iOS and Android trust it without any additional configuration.

This wide recognition means visitors reach your secure site without warnings. Understand Browser Compatibility 🔗

One SSL Certificate Across Your Subdomains

A wildcard takes the place of the separate SSL Certificates you would otherwise buy for each subdomain, so one SSL Certificate and a single expiry date cover the whole set. Management stays simple as the subdomain count rises.

Since new subdomains at the covered level are secured on their own, you can add services without placing another order. The saving grows with the number of subdomains one wildcard stands in for.

Unlimited Server Licenses

The wildcard SSL Certificate installs on as many servers as you need at no extra cost. This helps when subdomains run on separate infrastructure, such as different hosts, cloud platforms, or content delivery endpoints.

The same SSL Certificate and Private Key go on each server that serves a covered name. Where a setup needs its own key per server, you can reissue as often as needed at no charge.

Installation

Installation starts with a Certificate Signing Request (CSR) that names the wildcard, written as *.example.com. Once validation is complete, you deploy the issued SSL Certificate with the supplied intermediate chain files. Platform guides cover Apache, Nginx, Microsoft Internet Information Services (IIS), and other common web servers and control panels.

If you would prefer to hand it over, the Premium Installation service can carry out the work. Access Installation Guides 🔗

Support and Resources

The Trustico® website holds a broad set of free guides, frequently asked questions, and online tools across ordering, validation, and installation, which resolve most questions without contact.

For help with placing an order or completing domain validation, the Trustico® team is available through the published contact methods. Browse the Trustico® Support Resources 🔗

Refund Policy and Price Promise

An order is a license that unlocks once the Certificate Authority (CA) completes validation. If validation cannot be completed beforehand, the value of the order is held as Trustico® Prepaid Credit for use on another SSL Certificate, domain, or product.

After the SSL Certificate has been validated and issued, the license is active and refunds no longer apply. Requests outside this pre-validation protection are considered at the discretion of Trustico® through the refund request form. Review the No Risk Refund Policy 🔗

A price match against advertised prices from other providers applies both before and after you order, so your pricing stays competitive. Learn About The Trustico® Price Promise 🔗

Your SSL Certificate License

Your purchase is an SSL Certificate license for the term you choose, such as one or two years. A multiple year license locks in the current pricing for the whole term.

Because an individual SSL Certificate has a maximum validity set by industry rules, currently 200 days and subject to change, a longer license stays current by reissuing the SSL Certificate through the term rather than by one SSL Certificate covering the entire period.

Those reissues are free and unlimited, and each grants the most validity left on the term, so a reissue near the end lasts only until the term closes. The wildcard coverage and secured names carry across each reissue. Manage your reissues in the Trustico® Tracking System 🔗

A reissue is different from buying a new license. A reissue swaps the SSL Certificate within the license you hold, whereas a new license is a separate paid order, best placed about two weeks before the term ends to leave time to validate and install.

A notice is sent before the license period ends, though tracking the SSL Certificates installed on your own servers remains your responsibility. You can read expiry dates from the server, use a monitoring service, or download calendar files for the license and SSL Certificate dates from the tracking system.

Suitable Uses

The Sectigo® DV + Wildcard SSL Certificate suits sites that run several subdomains under one domain, such as separate areas for a shop, a blog, a support portal, and an account area. One wildcard secures them all at the covered level.

It also fits teams that add subdomains frequently, including development and staging names, since new subdomains at the covered level are secured without another order. Where a single name is all you need, the single site version is the simpler option.

Other Options

Where only one name needs securing rather than a set of subdomains, the single site version covers a single domain with the same Domain Validation. Compare DV Single Site 🔗

The same wildcard is offered under the Trustico® brand at the same validation level. Compare Trustico® DV Wildcard 🔗

For a wildcard that also carries a verified organization identity, an Organization Validation wildcard is offered under the Sectigo® brand. Compare OV Wildcard 🔗