Sectigo (ex Comodo) PositiveSSL Wildcard

The Sectigo (ex Comodo) PositiveSSL Wildcard certificate is a Domain Validated (DV) SSL product issued under Sectigo's root, formerly branded as Comodo, covering a root domain plus an unlimited number of first-level subdomains under a single purchase. It confirms domain control only, without checking company registration or legal identity. It suits domain owners who need SSL for subdomains consolidated under one low-cost certificate, without paying for organisation-level validation they don't need.

What Does Sectigo (ex Comodo) PositiveSSL Wildcard Cover?

A Sectigo (ex Comodo) PositiveSSL Wildcard certificate secures the root domain named on it and every first-level subdomain beneath it, so mail.example.com, shop.example.com, and blog.example.com are all covered by one purchase, including subdomains added after issuance with no need to reissue. It protects data in transit between server and browser only — it does not scan site code for malware or vulnerabilities, and it makes no assessment of the site's content or reputation. Coverage has specific limits:

• A second-level subdomain such as test.shop.example.com falls outside the wildcard scope and needs its own certificate.
• Unrelated domains are not covered under the same certificate.
• No organisation or company name is displayed in the browser, since DV validation confirms domain control only.

Who Needs Sectigo (ex Comodo) PositiveSSL Wildcard?

This certificate fits a personal or small business site running a webmail portal on a subdomain, a developer managing several staging and test subdomains under one project domain, a blog with a shop subdomain added later, or an agency ordering low-cost Wildcard certificates across multiple client domains where budget matters more than brand recognition of the issuing CA. It also suits a hosting reseller bundling Wildcard SSL into shared hosting packages, where keeping the per-certificate cost down matters more than the specific CA name shown in browser certificate details. It is not the right fit for a single domain with no subdomains, where a standard non-Wildcard certificate is cheaper, or for a site needing visible company verification, which requires OV or EV validation instead.

Key Features of Sectigo (ex Comodo) PositiveSSL Wildcard

• Validation type: DV only, confirmed via DNS record, HTTP file, or email to a domain-listed address.
• Encryption: 2048-bit RSA keys, SHA-256 signature algorithm.
• Issuance: typically within minutes after DNS or file validation clears.
• The following domains are covered: root domain and unlimited first-level subdomains, up to one level deep.
• Reissue: unlimited during the validity period, at no extra charge.
• Warranty: included, amount fixed by Sectigo's certificate terms.
• Browser support: recognised across all current major browsers, with no client-side root installation required, since Sectigo's root has long-standing default trust in browser and OS certificate stores.

Because the certificate and matching private key can be installed across several servers hosting different subdomains, larger setups sometimes reissue the certificate per server against a fresh CSR rather than reusing one private key everywhere, which simplifies key rotation if a server is later retired.

How to Get Sectigo (ex Comodo) PositiveSSL Wildcard: 3 Steps

1. Generate a CSR (Certificate Signing Request) for the root domain with an asterisk prefix (e.g. *.example.com).
2. Submit the CSR and complete DNS, file, or email validation to confirm control of the root domain.
3. Download the certificate and intermediate files once issued, and install them on each server or subdomain that needs coverage.

To buy Sectigo (ex Comodo) PositiveSSL Wildcard, Select the Wildcard option in the order form instead of the PositiveSSL single-domain listing, and compare the validity periods and reissue terms with those of other options. As with any DV certificate, renewal needs to be completed before expiry to avoid a lapse in encryption across every subdomain the certificate covers, not the root domain alone.