A Wildcard SSL certificate protects the main domain AND all its first-level subdomains: blog.example.tj, shop.example.tj, admin.example.tj and so on.
When you need Wildcard:
- You have 5+ subdomains and do not want a separate SSL for each.
- You regularly create new subdomains and do not want to configure SSL each time.
- Enterprise infrastructure with many services on different subdomains.
When you do not:
- 1–2 subdomains — simpler to issue individual DV certs or use AutoSSL Let’s Encrypt.
- Wildcard does not cover second-level subdomains:
api.v1.example.tjneeds a second Wildcard*.v1.example.tj.
Where to get Wildcard:
- Free via Let’s Encrypt — supported by AutoSSL but requires DNS validation (NS on our side or manual TXT setup).
- Paid — DV/OV Wildcard in the store, from 50 USD/year.
Free Wildcard via Let’s Encrypt is enough for most — ask in a ticket and we will set it up.
