Wildcard SSL certificates-secure unlimited subdomains
Wildcard certificates (*.domain.com) secure unlimited subdomains with one certificate. Cheaper than multi-domain certs.
A wildcard SSL certificate (*.domain.com) secures your main domain AND unlimited subdomains with a single certificate. Cost-effective for multi-subdomain sites.
What it covers
Certificate: *.domain.com covers:
- ✅ mail.domain.com
- ✅ api.domain.com
- ✅ app.domain.com
- ✅ blog.domain.com
- ❌ domain.com (root domain NOT covered by default)
- ❌ sub.mail.domain.com (multi-level subdomains NOT covered)
Note: To cover both domain.com and *.domain.com, get a certificate for both, or use a SAN (Subject Alternative Name) certificate.
Wildcard vs multi-domain
| Type | Covers | Cost | Best For |
|---|---|---|---|
| Wildcard | *.domain.com (unlimited subs) | Cheap | Many subdomains |
| Multi-domain | Specific domains (1-250) | Medium | Few specific domains |
| Single domain | One domain only | Cheapest | One domain |
Create wildcard certificate
- Generate CSR with CN=*.domain.com
- Submit to Certificate Authority (CA)
- Complete domain validation (DNS or email)
- Download and install certificate
UnderHost AutoSSL can automatically generate wildcard certificates. Check your control panel settings.
Related: SSL errors | CSR generation
Need security-focused hosting?
UnderHost services include DDoS-aware infrastructure, SSL support, account isolation, backups, and security guidance.





















