example.com
The agreed base domain for the wildcard.
Organization validation (OV)
SDH OV Wildcard SSL
Add organization verification to wildcard coverage for one base domain and its eligible first-level subdomains. This suits a business that needs verified identity while operating several services beneath the same domain.
- VALIDATION
- Organization validation (OV)
- COVERAGE
- One base domain and its eligible first-level subdomains.
- ISSUING CA
- SSL.com
Know the names you are securing
Verified organization, one domain hierarchy.
SDH OV Wildcard SSL combines organization checks with domain-control validation for the ordered wildcard. It is intended for eligible first-level subdomains beneath a single base domain.
portal.example.com
An eligible first-level name, alongside names such as mail.example.com.
app.portal.example.com
A deeper hostname that is not automatically covered by *.example.com.
Coverage boundary
Organization verification does not expand wildcard depth or cover other base domains. An OV wildcard for example.com does not automatically cover example.org, and this catalog does not offer an EV wildcard alternative.
Match the requirement
Where SDH OV Wildcard SSL fits.
Start with the addresses you need to protect and the identity checks your organization requires.
Business services beneath one domain
A website, portal and other eligible first-level hostnames that require organization-validated certificate details.
An evolving first-level hostname set
An organization adding eligible first-level services while keeping one base-domain certificate process.
A prepared administration team
An environment with people responsible for DNS validation, organization evidence and certificate replacement across the relevant servers.
HTTPS encrypts data in transit between supported clients and a correctly configured server. It does not guarantee that a website is malware-free or replace secure application and server administration.
Before you begin
Have the right access and information ready.
Confirm the domain hierarchy, organization legal name and an available verification contact. Ensure the administrator can use the accepted wildcard validation method and manage deployment to each service.
- Domain control. Access to an available CA-approved validation method for the requested names.
- Compatible hosting. A server or hosting service that accepts a separately supplied certificate, with an administrator available to install it.
- A certificate signing request (CSR). Your administrator generates it and keeps the corresponding private key secure.
- Organization details. The legal name and an appropriate contact for the CA's verification. Supporting information depends on the CA's requirements.
- A replacement plan. Someone responsible for later reissues, installation and manual renewal.
A CSR is request data, not a private key. Keep private keys, passwords, payment-card details and identity documents out of ordinary website enquiry forms.
A manual process, with clear responsibilities
How ordering works.
SDH coordinates your certificate order. The CA performs validation and issuance; your administrator handles installation.
Choose coverage and term
Select the prepaid period for SDH OV Wildcard SSL. Review the full upfront total and confirm the names and validation requirements with SDH before proceeding.
Prepare the certificate request
Generate a wildcard CSR for the agreed base domain, supply the organization legal name and confirm which first-level services will use the certificate.
Complete the CA's validation
Complete the CA's organization checks and its accepted wildcard domain-control method. Wildcard validation methods can differ from single-name requests, and organization review can take business days.
Install and check HTTPS
Your administrator installs the issued certificate and chain, configures HTTPS and checks the secured names. Later reissuance can require this step again.
A prepaid term is different from certificate validity.
Your selected 1 year prepaid period is paid in full upfront. It does not produce one certificate valid for an unrestricted period. CA and browser rules determine individual certificate validity. Later reissuance, validation and installation may be required within the prepaid subscription.
Understand the purchase
The certificate and the work around it.
Choose the right certificate coverage and agree any additional technical assistance separately.
Included with the selected certificate
- The ordered base domain and eligible first-level wildcard subdomains.
- Organization validation and the required domain-control checks.
- Issued certificate files, the applicable chain and issuer-supported reissuance.
Browser and device trust depends on valid issuance, supported clients and correct server configuration. A site seal is available only where the issuer supplies and licenses one for the product.
Not included in this purchase
- Certificate installation or deployment to your servers.
- Server repair, application fixes or mixed-content remediation.
- Continuous certificate management or automatic expiry reminders.
- Automatic renewal or a guaranteed future renewal price.
Plan for reissuance and renewal.
When the certificate is replaced, coordinate every service that uses it. The CA may need fresh organization or domain checks, and the administrator must deploy and verify the replacement on each endpoint.
Renewal is arranged manually; pricing will be confirmed before renewal. Reissuance is subject to the issuer's rules and does not include SDH installation labor or promise that every name change is free.
Frequently asked questions
More about SDH OV Wildcard SSL.
Keep the wildcard depth in view
Organization validation does not expand wildcard depth. Confirm the base domain and first-level services before requesting the certificate.
Does OV wildcard cover our other domains?
No. It covers the ordered base domain and eligible first-level subdomains. SDH OV Multi-Domain SSL may fit a specific list of names across different eligible domains.
Is EV wildcard available as an upgrade?
No EV wildcard product is offered here. If EV is required, consider SDH EV Multi-Domain SSL for explicit eligible names, then confirm that the named coverage fits your environment.
Is wildcard certificate deployment included?
No. Installation is not included, including deployment to multiple servers, server repair or mixed-content remediation. Ask SDH about separately scoped assistance if your administrator needs help.
Is installation included with SDH OV Wildcard SSL?
No. The certificate purchase does not include installation, server repair, mixed-content fixes or continuous certificate management. Your hosting administrator installs and verifies the certificate; ask SDH about separately agreed assistance if needed.
Does a five-year purchase mean one certificate lasts five years?
No. The prepaid term is the purchased subscription period. Individual certificate validity is subject to CA and browser requirements, so you may need reissuance, validation and replacement installation during that period.
How will renewal be handled?
Renewal is arranged manually; pricing will be confirmed before renewal. New validation and issuance steps may be needed. The current prepaid price is not a promise of future renewal pricing or automatic renewal.
Compare the alternatives
A different requirement may need a different certificate.
SDH Standard Wildcard SSL
Keep wildcard coverage when domain validation alone is sufficient.
Explore this certificate
SDH OV Multi-Domain SSL
Keep OV while covering three explicit names across eligible domains.
Explore this certificate
SDH High Assurance SSL
Use single-domain OV if first-level wildcard coverage is unnecessary.
Explore this certificateNeed to check your names or validation requirements?
Tell SDH what you need to secure. Include public hostnames and a short overview of the requirement.