UnderHost
Knowledgebase Docs

Wildcard SSL certificates-secure unlimited subdomains

Wildcard certificates (*.domain.com) secure unlimited subdomains with one certificate. Cheaper than multi-domain certs.

On this page

A wildcard SSL certificate (*.domain.com) secures your main domain AND unlimited subdomains with a single certificate. Cost-effective for multi-subdomain sites.

What it covers

Certificate: *.domain.com covers:

  • ✅ mail.domain.com
  • ✅ api.domain.com
  • ✅ app.domain.com
  • ✅ blog.domain.com
  • ❌ domain.com (root domain NOT covered by default)
  • ❌ sub.mail.domain.com (multi-level subdomains NOT covered)

Note: To cover both domain.com and *.domain.com, get a certificate for both, or use a SAN (Subject Alternative Name) certificate.

Wildcard vs multi-domain

TypeCoversCostBest For
Wildcard*.domain.com (unlimited subs)CheapMany subdomains
Multi-domainSpecific domains (1-250)MediumFew specific domains
Single domainOne domain onlyCheapestOne domain

Create wildcard certificate

  1. Generate CSR with CN=*.domain.com
  2. Submit to Certificate Authority (CA)
  3. Complete domain validation (DNS or email)
  4. Download and install certificate
AutoSSL supports wildcards

UnderHost AutoSSL can automatically generate wildcard certificates. Check your control panel settings.

Related: SSL errors | CSR generation

Was this article helpful?

Need security-focused hosting?

UnderHost services include DDoS-aware infrastructure, SSL support, account isolation, backups, and security guidance.

Related articles

Back to Security