GlobalSign DomainSSL Wildcard

The GlobalSign DomainSSL Wildcard certificate is a Domain Validated (DV) SSL product that secures a root domain plus an unlimited number of first-level subdomains under a single purchase, confirming domain control only. Once DNS or file verification clears, issuance typically completes within minutes, and new subdomains added later are covered automatically without reissuing. It's suited to domains running several services on subdomains — mail, shop, or staging — that want a higher warranty than an entry-level Wildcard certificate provides.

$ 120 / year Order now

The GlobalSign DomainSSL Wildcard certificate is a Domain Validated (DV) SSL product issued under GlobalSign's root, covering a root domain plus an unlimited number of first-level subdomains under a single purchase. It confirms domain control only, without checking company registration or legal identity, and sits a tier above GlobalSign's entry-level Wildcard product, with a stronger warranty attached. It suits domain owners who need SSL for subdomains consolidated under one certificate along with a higher warranty than a basic DV Wildcard provides.

What Does GlobalSign DomainSSL Wildcard Cover?

A GlobalSign DomainSSL Wildcard certificate secures the root domain named on it and every first-level subdomain beneath it, so mail.example.com, shop.example.com, and blog.example.com are all covered by one purchase, including subdomains added after issuance with no need to reissue. It protects data in transit between server and browser only — it does not scan site code for malware or vulnerabilities, and it makes no assessment of the site's content or reputation. Coverage has specific limits:

  • A second-level subdomain such as test.shop.example.com falls outside the wildcard scope and needs its own certificate.
  • Unrelated domains are not covered under the same certificate.
  • No organisation or company name is displayed in the browser, since DV validation confirms domain control only.

Who Needs GlobalSign DomainSSL Wildcard?

This certificate fits a company site running a separate webmail portal alongside its main domain, a SaaS product with an app subdomain and a staging subdomain both needing coverage, an agency managing several client subdomains under one root domain, or a growing platform that expects to add new subdomains regularly and wants the stronger warranty of DomainSSL over an entry-level Wildcard product. It also suits a business consolidating several existing single-domain certificates onto subdomains of one root domain, reducing the number of separate renewals to track. It is not the right fit for a single domain with no subdomains, where a non-Wildcard certificate is cheaper, or for a site needing visible company verification, which requires OV or EV validation instead.

Key Features of GlobalSign DomainSSL Wildcard

  • Validation type: DV only, confirmed via DNS record, HTTP file, or email to a domain-listed address.
  • Encryption: 2048-bit RSA keys, SHA-256 signature algorithm.
  • Issuance: typically within minutes after DNS or file validation clears.
  • Coverage: root domain plus unlimited first-level subdomains, one level deep only.
  • Reissue: unlimited during the validity period, at no extra charge.
  • Warranty: higher than GlobalSign's entry-level DV Wildcard line, fixed by GlobalSign's certificate terms.
  • Browser support: recognised across all current major browsers, with no client-side root installation required, since GlobalSign's root has long-standing default trust in browser and OS certificate stores.

Because a single certificate and private key can be installed across multiple servers hosting different subdomains, larger setups sometimes reissue the certificate per server using a matching CSR rather than copying one private key everywhere, which keeps key management cleaner if a server is later decommissioned.

How to Get GlobalSign DomainSSL Wildcard: 3 Steps

  1. Generate a CSR (Certificate Signing Request) for the root domain with an asterisk prefix (e.g. *.example.com).
  2. Submit the CSR and complete DNS, file, or email validation to confirm control of the root domain.
  3. Download the certificate and intermediate files once issued, and install them on each server or subdomain that needs coverage.

To buy GlobalSign DomainSSL Wildcard, select the Wildcard option in the order form rather than the single-domain DomainSSL listing, and compare warranty terms and reissue conditions against other DV GlobalSign DomainSSL Wildcard products before confirming the order. As with any DV certificate, renewal needs to be completed before expiry to avoid a lapse in encryption across every subdomain the certificate covers, not just the root domain itself; renewal reminders are typically sent in the weeks leading up to the expiry date.