[{"data":1,"prerenderedAt":109},["ShallowReactive",2],{"content:\u002Fglossary\u002Fwildcard-certificate":3,"related:\u002Fglossary\u002Fssl-certificate,\u002Ftools\u002Fssl-certificate-expiry-checker,\u002Fguides\u002Fhow-to-track-domain-and-ssl-expiry-dates":97},{"id":4,"title":5,"body":6,"category":82,"description":83,"extension":84,"faq":85,"h1":5,"meta":86,"navigation":87,"path":88,"published":89,"readingMinutes":90,"related":91,"seo":94,"stem":95,"updated":89,"__hash__":96},"glossary\u002Fglossary\u002Fwildcard-certificate.md","What is a wildcard SSL certificate?",{"type":7,"value":8,"toc":74},"minimark",[9,26,31,42,46,49,53,62,66],[10,11,12,13,17,18,21,22,25],"p",{},"A wildcard SSL certificate is issued for a name such as ",[14,15,16],"code",{},"*.example.com"," and covers every single-level subdomain of that domain, for example ",[14,19,20],{},"www.example.com"," and ",[14,23,24],{},"shop.example.com",", with one certificate.",[27,28,30],"h2",{"id":29},"what-does-a-wildcard-certificate-not-cover","What does a wildcard certificate not cover?",[10,32,33,34,37,38,41],{},"The bare domain ",[14,35,36],{},"example.com"," is not covered unless it is listed as a second name, and neither are subdomains of subdomains such as ",[14,39,40],{},"a.shop.example.com",". Always check the list of names on the certificate.",[27,43,45],{"id":44},"how-is-it-validated","How is it validated?",[10,47,48],{},"Most authorities require proof that you control the whole domain, usually through a DNS record. Let's Encrypt, for example, issues wildcard certificates only with DNS validation, so a changed DNS provider or a removed record can break renewal.",[27,50,52],{"id":51},"should-i-use-one-for-client-sites","Should I use one for client sites?",[10,54,55,56,61],{},"A wildcard is convenient for many subdomains of one client, but it concentrates risk: one expired or leaked certificate affects all of them. Track its expiry as carefully as the main one. The ",[57,58,60],"a",{"href":59},"\u002Ftools\u002Fssl-certificate-expiry-checker","certificate checker"," lists the names a certificate covers.",[27,63,65],{"id":64},"where-datumboard-fits","Where Datumboard fits",[10,67,68,69,73],{},"Datumboard puts the signals behind this in one dashboard for your client sites and side projects. It is in early access, and you can ",[57,70,72],{"href":71},"#early-access","join the list below",".",{"title":75,"searchDepth":76,"depth":76,"links":77},"",2,[78,79,80,81],{"id":29,"depth":76,"text":30},{"id":44,"depth":76,"text":45},{"id":51,"depth":76,"text":52},{"id":64,"depth":76,"text":65},"Security","A wildcard certificate covers every subdomain at one level, such as *.example.com. See what it covers, what it does not and how it is validated.","md",[],{},true,"\u002Fglossary\u002Fwildcard-certificate","2026-10-12",3,[92,59,93],"\u002Fglossary\u002Fssl-certificate","\u002Fguides\u002Fhow-to-track-domain-and-ssl-expiry-dates",{"title":5,"description":83},"glossary\u002Fwildcard-certificate","mGoD5sDcGNcPGN1vuxNnA5aYuZsFMZp_EynpcxCCu4M",[98,101,105],{"title":99,"description":100,"path":92,"category":82},"What is an SSL certificate?","An SSL certificate proves a website's identity and enables an encrypted HTTPS connection. Learn what it contains, why it expires and how to check it.",{"title":102,"description":103,"path":59,"category":104},"SSL certificate expiry checker (free)","Type a website address to see when its SSL certificate expires, who issued it, which names it covers and whether browsers will trust it. Free, no signup.","Free tool",{"title":106,"description":107,"path":93,"category":108},"Track domain and SSL expiry dates for clients","Why domains and SSL certificates lapse, how to check any expiry date in one command, and a repeatable process for tracking every client's renewals in time.","How-to",1791830037326]