Trustico® DV + Wildcard Information

The Trustico® DV + Wildcard SSL Certificate secures a domain and unlimited subdomains at a single wildcard position, written as *.example.com. It confirms control of the domain through Domain Validation (DV) and protects every covered name with strong encryption.

It is a strong fit for websites that run many subdomains, and for teams that add new ones often, since a covered subdomain is secured the moment it exists. Domain Validation applies no organization checks, so the SSL Certificate is issued quickly once control of the domain is confirmed.

This SSL Certificate performs server authentication and can secure a service on any port. Common uses include websites, webmail, e-mail servers running Simple Mail Transfer Protocol (SMTP) and Internet Message Access Protocol (IMAP), Virtual Private Network (VPN) servers, remote desktop, and network appliances or routers.

More broadly, it works with any other server, software, or device that accepts an SSL Certificate to secure a connection from one point to another. For information about Client Authentication 🔗 please read about global regulated changes prior to purchase.

Secures Domain and Unlimited Subdomains 🔗	Domain Validation 🔗
USD $500,000 Relying Party Warranty 🔗	2048-bit Industry Standard SSL Certificate
Multiple Year Orders Available	Delivered Via E-Mail
Includes the Trustico® Site Seal 🔗	Unlimited Server Licenses
Optional Installation Service 🔗	Trustico® No Risk Refund Policy 🔗
Unlimited Reissue Policy 🔗	99.9% Web Browser Ubiquity 🔗

The sections below explain what the Trustico® DV + Wildcard SSL Certificate covers, how it is validated, and how to put it in place.

Wildcard Coverage

A wildcard SSL Certificate secures unlimited subdomains at a single label position. Ordering *.example.com covers any name directly under example.com, such as www.example.com, shop.example.com, and blog.example.com, and the root domain example.com is included at no additional cost.

The wildcard covers one level, at the position of the asterisk. A name one level deeper, such as api.eu.example.com, is not covered by *.example.com and would need its own wildcard, written as *.eu.example.com. Understand Wildcard Coverage 🔗

Domain Control Validation

Domain Validation (DV) confirms that you control the domain, with no organization checks, so a wildcard SSL Certificate is issued quickly once control is shown. Control is proven by adding a Domain Name System (DNS) record or by replying to an e-mail at one of the approved addresses for the domain.

The file-based method used for single names cannot be used for a wildcard, because a wildcard is not tied to one web address that a file could sit behind. Read about Wildcard Validation 🔗

Adding New Subdomains

A new subdomain at the covered level is secured as soon as it exists, with no need to reissue the SSL Certificate. You can launch a service on a fresh subdomain and it is protected straight away, which suits sites where the subdomain list changes often.

If you do reissue for another reason, the wildcard coverage carries across unchanged. Manage any reissue in the Trustico® Tracking System 🔗

USD $500,000 Warranty

Every Trustico® DV + Wildcard SSL Certificate carries a USD $500,000 Relying Party Warranty that covers the secured names. It provides financial cover in the unlikely event that the Certificate Authority (CA) issues the SSL Certificate in error.

You can reissue the SSL Certificate as often as you need at no charge, for example after changing your Private Key or moving servers. Review Warranty Details 🔗

Encryption and Protocols

The SSL Certificate uses a 2048-bit RSA key with 256-bit symmetric encryption, over the Transport Layer Security (TLS) 1.2 and 1.3 protocols, with SHA-256 hashing. Every covered subdomain connects over HTTPS with the padlock shown.

It also supports the encryption requirements of the Payment Card Industry Data Security Standard (PCI DSS). Compare Encryption Algorithms 🔗

Trustico® Site Seal

Every order includes a complimentary Trustico® site seal that you can display across your subdomains to reassure visitors. It sits well on payment, sign-up, and contact pages, where confidence matters most.

The seal is added with a short piece of HTML. Explore the Trustico® Site Seal 🔗

Browser Compatibility

The SSL Certificate is trusted by around 99.9% of web browsers, including Chrome, Firefox, Safari, and Edge. Mobile devices on iOS and Android trust it without any additional configuration.

This wide recognition means visitors reach your secure site without warnings. Understand Browser Compatibility 🔗

One SSL Certificate Across Your Subdomains

A wildcard replaces the separate SSL Certificates you would otherwise order for each subdomain, so a single SSL Certificate and one expiry date cover the whole set. This keeps management simple as the number of subdomains grows.

Because new subdomains at the covered level are secured automatically, you can add services without ordering anything further. The saving grows with the number of subdomains a single wildcard replaces.

Unlimited Server Licenses

The wildcard SSL Certificate can be installed on as many servers as you need at no extra cost. This suits subdomains that run on different infrastructure, such as separate hosts, cloud platforms, or content delivery endpoints.

The same SSL Certificate and Private Key are deployed to each server that serves a covered name. Where a setup needs its own key on each server, you can reissue as often as needed at no charge.

Installation

Installation begins with a Certificate Signing Request (CSR) that names the wildcard, written as *.example.com. After validation, you deploy the issued SSL Certificate with the supplied intermediate chain files. Platform guides cover Apache, Nginx, Microsoft Internet Information Services (IIS), and other common web servers and control panels.

If you would rather have it handled for you, the Premium Installation service can carry out the work. Access Installation Guides 🔗

Support and Resources

The Trustico® website provides a large set of free guides, frequently asked questions, and online tools covering ordering, validation, and installation, so most questions can be answered without contact.

For help with placing an order or completing domain validation, the Trustico® team is available through the published contact methods. Browse the Trustico® Support Resources 🔗

Refund Policy and Price Promise

An order is a license that unlocks once the Certificate Authority (CA) completes validation. If validation cannot be completed beforehand, the value of the order is held as Trustico® Prepaid Credit for use on another SSL Certificate, domain, or product.

Once the SSL Certificate has been validated and issued, the license is active and refunds no longer apply. Requests outside this pre-validation protection are considered at the discretion of Trustico® through the refund request form. Review the No Risk Refund Policy 🔗

A price match against advertised prices from other providers applies both before and after you order, so your pricing stays competitive. Learn About The Trustico® Price Promise 🔗

Your SSL Certificate License

Your purchase is an SSL Certificate license for the term you choose, such as one or two years. A multiple year license fixes the current pricing for the whole term.

Because an individual SSL Certificate has a maximum validity set by industry rules, currently 200 days and subject to change, a longer license is kept current by reissuing the SSL Certificate during the term rather than by a single SSL Certificate covering the full period.

Reissues are free and unlimited across the license, and each gives the largest validity left on the term, so a reissue late in the license runs only to its end. The wildcard coverage and secured names carry across each reissue. Manage your reissues in the Trustico® Tracking System 🔗

A reissue is not the same as buying a new license. A reissue replaces the SSL Certificate within the license you hold, while a new license is a separate paid order, best placed about two weeks before the term ends to allow time to validate and install.

A notice is sent before the license period ends, though tracking the SSL Certificates installed on your own servers stays with you. You can read expiry dates from the server, use a monitoring service, or download calendar files for the license and SSL Certificate dates from the tracking system.

Suitable Uses

The Trustico® DV + Wildcard SSL Certificate suits websites that run several subdomains under one domain, such as separate areas for a shop, a blog, a support portal, and an account area. A single wildcard secures them all at the covered level.

It also fits teams that add subdomains often, including development and staging names, since new subdomains at the covered level are secured without another order. Where only a single name needs securing, the single site version is the simpler choice.

Other Options

Where you need to secure only one name rather than a set of subdomains, the single site version covers a single domain with the same Domain Validation. Compare DV Single Site 🔗

The same wildcard is available under the Sectigo® brand as a recognized Certificate Authority, at the same validation level. Compare Sectigo® DV Wildcard 🔗

For a wildcard that also carries a verified organization identity, an Organization Validation wildcard is offered under the Sectigo® brand. Compare OV Wildcard 🔗