Best SSL Wildcard Certificates
SSL Wildcard Certificates are big money-savers. An SSL Wildcard Certificate allows you to secure an unlimited number of first-level sub-domains on a single domain name. That means you can get an SSL Certificate with the common name as *.mydomain.com and you can use it on all of the following without receiving any errors:
However, in most web browsers (including Internet Explorer) SSL Wildcard Certificates won't work for multiple levels. This means that an SSL Certificate Wildcard for *.mydomain.com won't work on www.mail.mydomain.com or site1.sitea.mydomain.com or my.ridiculously.long.subdomain.mydomain.com. The web browser will give a name mismatch error. If you need to secure multiple levels of subdomains or completely different domain names in one certificate, check out Unified Communications SSL Certificates. What other benefits and drawbacks are there to SSL Wildcard Certificates?
Advantages of SSL Wildcard Certificates
- Secures Unlimited Sub-Domains. Where you would normally have to buy a single SSL certificate for each subdomain, you can just buy and use one certificate.
- Cheaper. Though they cost more than a single certificate, they can easily pay for themselves if you use them on more than a few subdomains. Some certificate providers even provide an unlimited server license so you only buy one wildcard certificate for as many web servers as necessary.
- Easier to manage. Deploying 30 different individual SSL certificates can be a daunting task, even with a PKI management interface. And then you have to do it all over again, when it comes time to renew them. A wildcard certificate makes quick work of many situations.
Disadvantages of SSL Wildcard Certificates
- Security. If you only use one certificate and private key on multiple servers, it only takes one server to be compromised and all of the others will be vulnerable as well. In the unlikely event that this will occur, you would have to reissue and replace all of the certificates on all of the servers as soon as possible. Some providers solve this by allowing you to generate new SSL Wildcard certificates using unique private keys.
- Mobile Device Compatibility. Some popular mobile device operating systems, including Windows Mobile 5, don't recognize the wildcard character (*) and therefore can't use a wildcard certificate. If you need to support these devices you will need to use a single certificate, a UC certificate, or a wildcard certificate with Subject Alternative Names.
|Certificate Name||DigiCert's Wildcard Plus||SSL.com's Multi-subdomain Wildcard SSL||GeoTrust's True BusinessID Wildcard||Thawte's Wildcard Certificate|
|Buy Now||Buy Now||Buy Now||Buy Now||Buy Now|
|Certificate Authority Rating||From reviews||From reviews||From reviews||From reviews|
|Price For 1 Year||
|Multiple Year Options||Up to 3 Years||Up to 3 Years||Up to 3 Years||Up to 2 Years|
|Domains Secured||Unlimited sub domains on a single Domain Name + the base domain||Unlimited sub domains on a single Domain Name + the base domain||Unlimited sub domains on a single Domain Name||Unlimited sub domains on a single Domain Name|
|Issuance Speed||Within 1 hour||Within an hour||1-2 days||2-4 Business days|
|Validation Required||Organization and Domain Validation||Organization and Domain Validation||Organization and Domain Validation||Organization and Domain Validation|
|Notification Level in Browsers||Domain Name and Organization Name Shown On Certificate||Domain Name and Organization Name Shown On Certificate||Domain Name and Organization Name Shown On Certificate||Domain Name and Organization Name Shown On Certificate|
|Number of Free Reissues Allowed||Unlimited until expired||Unlimited until expired||Unlimited until expired||Unlimited until expired|
|Server License||Unlimited Servers||Unlimited Servers||Unlimited Servers||Single Server - Additional server licenses may be purchased|
|Support Options||Free Chat, Phone and E-mail, Monday-Thursday 24 hrs., Friday 12 am-7 pm, Saturday 7 am-3 pm MST||Free Chat, Phone and E-mail, 24/7||Free Chat, and E-mail, Monday-Friday 8AM-8PM EST, Phone support available for purchase||Free Chat, Phone and E-mail, 24/5, Multi-lingual|
|Refund Policy||Full refund within 30 days of issuance||Full refund within 30 days of issuance||Full refund within 30 days of issuance||Full refund within 30 days of issuance|
|Learn More||Learn More||Learn More||Learn More||Learn More|
|Remove From Comparison||Remove||Remove||Remove||Remove|
|Buy Now||Buy Now||Buy Now||Buy Now||Buy Now|