Trustico® DV + Wildcard + Multi Domain Information

The Trustico® DV + Wildcard + Multi Domain SSL Certificate secures several wildcard domains on one SSL Certificate, using Subject Alternative Names (SANs). Each wildcard entry, such as *.example.com, covers unlimited subdomains at its label position, and its matching root domain is included at no extra cost.

It suits an organization running more than one domain where each needs full subdomain coverage, held together under a single SSL Certificate with one expiry date. Every entry must be a wildcard, so standard domain names without subdomain coverage belong on a Multi Domain SSL Certificate instead.

This SSL Certificate performs server authentication and can secure a service on any port. Common uses include websites, webmail, e-mail servers running Simple Mail Transfer Protocol (SMTP) and Internet Message Access Protocol (IMAP), Virtual Private Network (VPN) servers, remote desktop, and network appliances or routers.

More broadly, it works with any other server, software, or device that accepts an SSL Certificate to secure a connection from one point to another. For information about Client Authentication 🔗 please read about global regulated changes prior to purchase.

Secures Multiple Wildcard Domains 🔗	Domain Validation 🔗
USD $500,000 Relying Party Warranty 🔗	2048-bit Industry Standard SSL Certificate
Root Domain Included for Each Wildcard	Unlimited Subdomains Per Wildcard
Additional Wildcard SANs Available	Delivered Via E-Mail
Includes the Trustico® Site Seal 🔗	Unlimited Server Licenses
Optional Installation Service 🔗	Trustico® No Risk Refund Policy 🔗
Unlimited Reissue Policy 🔗	99.9% Web Browser Ubiquity 🔗

The sections below explain what the Trustico® DV + Wildcard + Multi Domain SSL Certificate covers, how it is validated, and how to put it in place.

Multiple Wildcard Domains on One SSL Certificate

A wildcard entry such as *.example.com secures every single-level subdomain beneath that name, including www.example.com, shop.example.com, and mail.example.com, with no limit on how many subdomains it covers. This SSL Certificate holds several such wildcard entries together, so one order covers subdomains across a group of separate root domains.

Every entry on the SSL Certificate must be a wildcard in the format *.example.com. Standard domain names without subdomain coverage are not accepted here, and belong on a Multi Domain SSL Certificate instead. Explore Wildcard Coverage 🔗

Root Domain Included for Each Wildcard

A wildcard entry covers the subdomains of a name, but not the bare root domain itself. For every wildcard on the SSL Certificate, Trustico® adds that root domain at no extra cost, so ordering *.example.com also secures example.com.

This applies to each wildcard you include, and to wildcards placed deeper in the hierarchy. Ordering *.shop.example.com also secures shop.example.com, so coverage is complete at every level without separate entries for the roots.

Wildcard Domain Validation

Domain Validation (DV) confirms control of each wildcard domain on the SSL Certificate, with no organization checks, so issuance is quick once every entry is confirmed. Each wildcard is validated on its own before the SSL Certificate is issued.

Two methods are available for a wildcard entry : replying to an e-mail sent to an approved address on the domain, or adding a Domain Name System (DNS) record in the domain's zone.

File-based validation is not available for a wildcard, because a file cannot prove control of every possible subdomain. This restriction is set by industry rules and applies to every provider. Understand the Validation Procedure 🔗

Adding and Changing Names

You can add more wildcard entries during the term by purchasing additional Subject Alternative Names (SANs). The price is pro-rata, based on the validity remaining on your license, so an entry added later in the term costs less than one added near the start.

Once you order an additional wildcard, Trustico® reviews the order and decides the best way to add it. In most cases the team adds the entry for you, and in some cases you receive an activation code to complete the addition yourself in the Trustico® Tracking System 🔗

Each new wildcard is validated in the same way as the original entries before it is included, while the others stay in place. To remove a wildcard from the SSL Certificate, contact the Trustico® team and they will make the change for you.

USD $500,000 Warranty

Every Trustico® DV + Wildcard + Multi Domain SSL Certificate carries a USD $500,000 Relying Party Warranty that covers every wildcard, root domain, and subdomain on the SSL Certificate. It provides financial cover in the unlikely event that the Certificate Authority (CA) issues the SSL Certificate in error.

You can reissue the SSL Certificate as often as you need at no charge, for example after changing your Private Key or moving to a new server. Review Warranty Details 🔗

Encryption and Protocols

The SSL Certificate uses a 2048-bit RSA key with 256-bit symmetric encryption, over the Transport Layer Security (TLS) 1.2 and 1.3 protocols, with SHA-256 hashing. Every secured name connects over HTTPS with the padlock shown.

It also supports the encryption requirements of the Payment Card Industry Data Security Standard (PCI DSS). Compare Encryption Algorithms 🔗

Trustico® Site Seal

Every order includes a complimentary Trustico® site seal that you can display on any secured domain or subdomain to reassure visitors. It works well on payment, sign-up, and contact pages, where confidence matters most.

The seal is added with a short piece of HTML. Explore the Trustico® Site Seal 🔗

Browser Compatibility

The SSL Certificate is trusted by around 99.9% of web browsers, including Chrome, Firefox, Safari, and Edge. Mobile devices on iOS and Android trust it without any additional configuration.

This wide recognition means visitors reach every secured subdomain without warnings. Understand Browser Compatibility 🔗

Unlimited Server Licenses

The SSL Certificate can be installed on as many servers as you need at no extra cost, which suits a portfolio whose wildcard domains run on separate infrastructure, such as different hosts, cloud platforms, or content delivery endpoints.

The same SSL Certificate and Private Key are deployed to each server that serves a secured name. Where a server needs its own key, you can reissue as often as needed at no charge.

Development and Staging Environments

A wildcard entry for *.dev.example.com or *.staging.example.com gives real HTTPS coverage to every development and staging subdomain, and the free root inclusion secures dev.example.com and staging.example.com as well. This removes the need for self-signed SSL Certificates in non-production environments.

Teams then work against the same encryption as production, client demonstrations on staging subdomains load without browser warnings, and workflows that depend on HTTPS run without exceptions.

Installation

Installation begins with a Certificate Signing Request (CSR) for the primary wildcard, with the additional wildcards given during ordering. After validation, you deploy the issued SSL Certificate with the supplied intermediate chain files. Platform guides cover Apache, Nginx, Microsoft Internet Information Services (IIS), and other common web servers and control panels.

If you would rather have it handled for you, the Premium Installation service can carry out the work. Access Installation Guides 🔗

Support and Resources

The Trustico® website provides a large set of free guides, frequently asked questions, and online tools covering ordering, validation, and installation, so most questions can be answered without contact.

For help with placing an order or completing validation across several wildcard domains, the Trustico® team is available through the published contact methods. Browse the Trustico® Support Resources 🔗

Refund Policy and Price Promise

An order is a license that unlocks once the Certificate Authority (CA) completes validation. If validation cannot be completed beforehand, the value of the order is held as Trustico® Prepaid Credit for use on another SSL Certificate, domain, or product.

Once the SSL Certificate has been validated and issued, the license is active and refunds no longer apply. Requests outside this pre-validation protection are considered at the discretion of Trustico® through the refund request form. Review the No Risk Refund Policy 🔗

A price match against advertised prices from other providers applies both before and after you order, so your pricing stays competitive. Learn About The Trustico® Price Promise 🔗

Your SSL Certificate License

Your purchase is an SSL Certificate license for the term you choose, such as one or two years. A multiple year license fixes the current pricing for the whole term.

Because an individual SSL Certificate has a maximum validity set by industry rules, currently 200 days and subject to change, a longer license is kept current by reissuing the SSL Certificate during the term rather than by a single SSL Certificate covering the full period.

Reissues are free and unlimited across the license, and each gives the largest validity left on the term, so a reissue late in the license runs only to its end. Every wildcard and its root domain carry across each reissue. Manage your reissues in the Trustico® Tracking System 🔗

A reissue is not the same as buying a new license. A reissue replaces the SSL Certificate within the license you hold, while a new license is a separate paid order, best placed about two weeks before the term ends to allow time to validate and install.

A notice is sent before the license period ends, though tracking the SSL Certificates installed on your own servers stays with you. You can read expiry dates from the server, use a monitoring service, or download calendar files for the license and SSL Certificate dates from the tracking system.

Suitable Uses

The Trustico® DV + Wildcard + Multi Domain SSL Certificate suits an organization whose every domain needs full subdomain coverage, such as a business running several brand sites that each use subdomains for shops, support, and accounts. It also fits software providers that host client instances on subdomains across several root domains.

Franchise networks with regional domains, and agencies that group client wildcard domains to keep management and billing simple, are well matched too. Learn About the Partner Service 🔗

Other Options

Where a single domain needs wildcard coverage, the single wildcard version secures one wildcard and its root domain. Compare DV Wildcard 🔗

Where you need to secure a fixed list of standard names rather than wildcards, the Multi Domain option lists each name in full. Compare DV Multi Domain 🔗