example.com
The base domain associated with the wildcard certificate.
Domain validation (DV)
SDH Standard Wildcard SSL
Use domain validation for one base domain and its eligible first-level subdomains. This wildcard option fits a growing set of services under the same domain when you do not need organization identity checks in the certificate.
- VALIDATION
- Domain validation (DV)
- COVERAGE
- One base domain and its eligible first-level subdomains.
- ISSUING CA
- SSL.com
Know the names you are securing
One base domain and its first-level subdomains.
SDH Standard Wildcard SSL is for eligible names directly beneath one base domain. Plan the hierarchy before choosing it: wildcard coverage has a specific depth.
shop.example.com
An eligible first-level subdomain, like mail.example.com.
app.shop.example.com
A deeper name; it is not automatically covered by *.example.com.
Coverage boundary
A wildcard for example.com does not cover another domain such as example.org or every deeper level of subdomains. Confirm the exact base-domain coverage and server requirements before ordering.
Match the requirement
Where SDH Standard Wildcard SSL fits.
Start with the addresses you need to protect and the identity checks your organization requires.
Services beneath one brand domain
A website with shop, mail or portal hostnames directly beneath the same base domain.
First-level names that change
A service structure where eligible first-level subdomains are added over time and a shared certificate process is appropriate.
A domain-controlled environment
A team that can complete the issuer's accepted wildcard validation method and coordinate deployment across its servers.
HTTPS encrypts data in transit between supported clients and a correctly configured server. It does not guarantee that a website is malware-free or replace secure application and server administration.
Before you begin
Have the right access and information ready.
Check the whole hostname hierarchy and confirm that your administrator can complete the CA-approved wildcard validation method, often involving DNS. Do not assume every domain-validation method is available for wildcard requests.
- Domain control. Access to an available CA-approved validation method for the requested names.
- Compatible hosting. A server or hosting service that accepts a separately supplied certificate, with an administrator available to install it.
- A certificate signing request (CSR). Your administrator generates it and keeps the corresponding private key secure.
- A replacement plan. Someone responsible for later reissues, installation and manual renewal.
A CSR is request data, not a private key. Keep private keys, passwords, payment-card details and identity documents out of ordinary website enquiry forms.
A manual process, with clear responsibilities
How ordering works.
SDH coordinates your certificate order. The CA performs validation and issuance; your administrator handles installation.
Choose coverage and term
Select the prepaid period for SDH Standard Wildcard SSL. Review the full upfront total and confirm the names and validation requirements with SDH before proceeding.
Prepare the certificate request
Have your administrator generate the appropriate wildcard CSR, confirm the base domain, and check which first-level services will receive the certificate.
Complete the CA's validation
Prove control of the wildcard's base domain through an issuer-approved method available for this request. The validation method and a correctly prepared request affect progress; no issuance time is guaranteed.
Install and check HTTPS
Your administrator installs the issued certificate and chain, configures HTTPS and checks the secured names. Later reissuance can require this step again.
A prepaid term is different from certificate validity.
Your selected 1 year prepaid period is paid in full upfront. It does not produce one certificate valid for an unrestricted period. CA and browser rules determine individual certificate validity. Later reissuance, validation and installation may be required within the prepaid subscription.
Understand the purchase
The certificate and the work around it.
Choose the right certificate coverage and agree any additional technical assistance separately.
Included with the selected certificate
- The ordered base domain and its eligible first-level wildcard subdomains.
- Domain validation and the applicable issued certificate files and chain.
- Reissuance under the issuer's rules during the prepaid subscription.
Browser and device trust depends on valid issuance, supported clients and correct server configuration. A site seal is available only where the issuer supplies and licenses one for the product.
Not included in this purchase
- Certificate installation or deployment to your servers.
- Server repair, application fixes or mixed-content remediation.
- Continuous certificate management or automatic expiry reminders.
- Automatic renewal or a guaranteed future renewal price.
Plan for reissuance and renewal.
A wildcard certificate can be used across several services, so certificate or key replacement needs coordinated deployment. Protect private keys and confirm your server setup before reusing or replacing a certificate.
Renewal is arranged manually; pricing will be confirmed before renewal. Reissuance is subject to the issuer's rules and does not include SDH installation labor or promise that every name change is free.
Frequently asked questions
More about SDH Standard Wildcard SSL.
Check the wildcard boundary
A wildcard covers eligible first-level subdomains of one base domain. Deeper names and other domains need a different plan.
Does a wildcard cover every level of subdomain?
No. A wildcard for *.example.com can cover eligible names such as shop.example.com. It does not automatically cover app.shop.example.com, and it does not cover an unrelated base domain.
Can this verify the organization as well?
This is a DV wildcard certificate. SDH OV Wildcard SSL is the listed alternative when you need organization verification with eligible first-level wildcard coverage.
Will one installation secure every server?
No. Each relevant server must be configured correctly. Certificate installation, deployment coordination and remediation are not included in the certificate purchase.
Is installation included with SDH Standard Wildcard SSL?
No. The certificate purchase does not include installation, server repair, mixed-content fixes or continuous certificate management. Your hosting administrator installs and verifies the certificate; ask SDH about separately agreed assistance if needed.
Does a five-year purchase mean one certificate lasts five years?
No. The prepaid term is the purchased subscription period. Individual certificate validity is subject to CA and browser requirements, so you may need reissuance, validation and replacement installation during that period.
How will renewal be handled?
Renewal is arranged manually; pricing will be confirmed before renewal. New validation and issuance steps may be needed. The current prepaid price is not a promise of future renewal pricing or automatic renewal.
Compare the alternatives
A different requirement may need a different certificate.
SDH Standard SSL
Choose single-domain DV if the extra subdomain coverage is unnecessary.
Explore this certificate
SDH Multi-Domain SSL
Cover a named set of distinct domains rather than one domain hierarchy.
Explore this certificate
SDH OV Wildcard SSL
Retain wildcard coverage and add organization validation.
Explore this certificateNeed to check your names or validation requirements?
Tell SDH what you need to secure. Include public hostnames and a short overview of the requirement.