Website names covered
Covers example.com and first-level names matched by *.example.com. It does not include login.shop.example.com or a different base domain such as example.net.
Find certificates, plan installation, or request a quotation.
EssentialSSL — powered by Sectigo
One domain · SubdomainsEssentialSSL Wildcard covers your base domain and first-level subdomains with one Sectigo-issued DV certificate. Use it for services such as shop.example.com, mail.example.com and portal.example.com.
Choose your planSubscription ≠ certificate validity. Revalidation, replacement and installation are required during your plan, including a one-year subscription. How it works
Need help choosing? Ask us on WhatsApp (opens in a new tab)
Covers example.com and first-level names matched by *.example.com. It does not include login.shop.example.com or a different base domain such as example.net.
No. Each issued certificate has its own expiry. Revalidation, replacement and installation are required during the subscription, including a one-year plan. Follow the actual certificate expiry and the current CA instructions.
EssentialSSL Wildcard covers your base domain and first-level subdomains with one Sectigo-issued DV certificate. Use it for services such as shop.example.com, mail.example.com and portal.example.com.
Choose EssentialSSL DV when only your main website and www need protection. Choose a suitable multi-domain product for different base domains, or OV when organization verification is required.

DV checks control of the requested domain; it does not verify a business’s legal identity. Plan for DNS access for wildcard validation. Use the record supplied for your order. Payment confirmation and certificate validation are separate steps.
Use the current BDT prices in the subscription selector for EssentialSSL Wildcard. Compare the full selected-term total as well as the annual equivalent. Quantity buys separate certificate subscriptions. Quantity does not add names to a single certificate. The cart checks the current price again before you place your order.
Read our payment policy, digital delivery policy and refund terms.
Choose your subscriptionSelect the subscription and quantity, then complete checkout. For bank transfer, upload the receipt on the payment page. A receipt is reviewed before funds are confirmed; a partial payment leaves the balance due.
You can order first and request setup help after the payment requirements are met. Provide a CSR from your server or ask for guidance. Keep the matching private key on your server; do not send it by email or support ticket.
DV checks control of the requested domain; it does not verify a business’s legal identity. Plan for DNS access for wildcard validation. Use the record supplied for your order. Payment confirmation and certificate validation are separate steps.
After issuance, download the certificate and chain from your account. Install them with the matching private key, verify HTTPS for the covered names and track the actual certificate expiry.
A wildcard such as *.example.com covers shop.example.com and mail.example.com, but not login.shop.example.com or another base domain. Confirm the root name separately during setup.
DV checks control of the requested domain; it does not verify a business’s legal identity. Plan for DNS access for wildcard validation. Use the record supplied for your order. Payment confirmation and certificate validation are separate steps.
Use the current BDT prices in the subscription selector for EssentialSSL Wildcard. Compare the full selected-term total as well as the annual equivalent. Quantity buys separate certificate subscriptions. Quantity does not add names to a single certificate. The cart checks the current price again before you place your order.
Choose EssentialSSL Wildcard when you need first-level subdomains under one base domain and Domain Validation (DV). It can suit a business website when domain validation meets your requirements. Choose an OV or EV product if verified organization identity is required. Compare the same coverage and subscription term before choosing. Validation level describes identity checks, not stronger encryption.
You can order first and request setup help after the payment requirements are met. Provide a CSR from your server or ask for guidance. Keep the matching private key on your server; do not send it by email or support ticket.
No. Each issued certificate has its own expiry. Revalidation, replacement and installation are required during the subscription, including a one-year plan. Follow the actual certificate expiry and the current CA instructions.
Ask for setup guidance. Installation, monitoring and other services apply only as agreed for your order. Reissue replaces a certificate within the current subscription; renewal purchases a new subscription at the then-current price. Review the published delivery, renewal and refund policies.
The selected offer includes the base domain and first-level subdomains. For *.example.com, that means example.com, www.example.com and shop.example.com. Check all required names when submitting the CSR and after issuance.
No. HTTP or HTTPS file validation cannot validate wildcard coverage. Plan for DNS access and publish the exact record supplied for your order. Follow the current Sectigo instructions for any other offered method.
No. It uses Domain Validation. Its wider hostname coverage does not add organization checks or stronger encryption. Choose an available OV wildcard product if verified business identity is required.
Review the full total before checkout. Contact support for selection help; request a quote for custom requirements or an unlisted product.