FAQs

Not in their encryption, which is the same as any other certificate’s. The risk is the shared private key: every server that uses the certificate holds it, so a leak on one server affects every subdomain it covers. Install it on as few servers as you need and protect each copy.

Copy Link

No. Wildcard certificates are still defined and issued under the CA/Browser Forum’s Baseline Requirements. What’s changing is how you manage them: shorter maximum validity, more frequent domain validation, and the end of email validation on March 15, 2028, which leaves DNS validation for wildcards.

Copy Link

Yes, on SSL Dragon’s wildcard certificates. The asterisk in *.example.com doesn’t match example.com on its own, so the base domain is added to the certificate as a second name. One wildcard certificate then secures example.com, www.example.com, and every other first-level subdomain.

Copy Link

A wildcard SSL certificate costs $56.33 to $246.66 per year for DV and $120 to $3,333.33 per year for OV, on a 3-year plan. Brand and warranty set the price within each range; shorter terms cost more per year. The cheapest wildcard costs $69 for 1 year.

Copy Link

If you still have the private key, you can generate a fresh CSR from it with OpenSSL. If the private key itself is gone, any certificate issued against it is unusable, and nobody can recover it, including the Certificate Authority. Generate a new key pair and CSR here, then ask your CA for a reissue.

Copy Link

Run it through our CSR Decoder. Decoding is not decryption: a CSR is not encrypted, it is Base64-encoded structured data, and the decoder parses that structure and prints the fields in readable form. Paste your CSR block in and you will see the Common Name, Organization, Country and key details exactly as the Certificate Authority will read them.

Copy Link

A few seconds. The request is built as soon as you submit the form and appears on this page. What takes time is validating the certificate itself, which happens after you place your order. Domain validated certificates are usually issued within minutes, while organization and extended validation can take several days.

Copy Link

Generate a new one. A CSR costs nothing and records nothing, so there is no penalty for discarding it. If you have already placed your order, most Certificate Authorities let you swap in a replacement CSR before validation finishes. After the certificate is issued, a wrong Common Name or Organization means a reissue, which most CAs provide free.

Copy Link

Yes. That is what this CSR generator is for. OpenSSL is the standard command-line way to create a certificate signing request, but it means installing the toolkit and getting the syntax right. This form does the same job in a browser. If you would rather work in a terminal, our OpenSSL guides cover the commands.

Copy Link

Yes. This is a free CSR generator with no account, no registration and no cap on how many requests you generate. You do not have to buy a certificate from SSL Dragon to use it, and the CSR works with any Certificate Authority.

Copy Link