Why Choose Sectigo EssentialSSL Wildcard
Fast Domain Validation
This certificate uses Domain Validation (DV), the simplest and fastest validation type available. There are no business documents to submit and no manual review to wait for. You verify domain ownership by responding to an email sent to an admin address (admin@, administrator@, webmaster@) or by adding a DNS record. Sectigo issues the certificate within minutes of successful verification.
Unlimited Subdomain Coverage
A single Sectigo EssentialSSL Wildcard certificate protects your main domain and every first-level subdomain under it. During CSR generation, you enter *.yourdomain.com as the Common Name, and the asterisk acts as a wildcard that covers any subdomain at that level: blog.yourdomain.com, shop.yourdomain.com, mail.yourdomain.com, and any others you add in the future. There is no need to reissue the certificate when you create new subdomains.
Note that wildcard coverage applies to first-level subdomains only. A subdomain like app.shop.yourdomain.com (second level) would require a separate certificate.
256-Bit Encryption with 2048-Bit RSA Key
The certificate uses 256-bit symmetric encryption paired with a 2048-bit RSA signature key, meeting current industry standards set by the CA/Browser Forum. Both RSA and ECC key algorithms are supported, so you can choose the option that best fits your server configuration during CSR generation.
$10,000 Warranty
Sectigo backs this certificate with a $10,000 reliance warranty. It covers financial damages in the unlikely event that a data breach occurs due to a flaw in the certificate itself, such as mis-issuance or a failure in Sectigo’s CA infrastructure. The warranty does not cover breaches caused by other vulnerabilities on your server or application.
Sectigo Site Seal
The certificate includes a static Sectigo site seal that you can place on your website to signal to visitors that their connection is encrypted and verified. While higher-tier Sectigo products come with a dynamic, clickable seal, the static version still provides a recognizable trust indicator backed by the Sectigo brand.
Unlimited Server Licensing and Reissues
You can install this certificate on as many servers as you need at no extra cost. If you host your website across multiple servers for redundancy or load balancing, there is no need to purchase additional licenses. You can also reissue the certificate at any time, free of charge, which is useful when migrating servers or regenerating keys.
How to Get Your Sectigo EssentialSSL Wildcard Certificate
The process from the moment you buy your Sectigo EssentialSSL Wildcard certificate to a fully encrypted website takes just a few steps.:
- Generate a CSR (Certificate Signing Request). Create the CSR on your server with *.yourdomain.com as the Common Name. If you are not familiar with the process, you can use SSL Dragon’s CSR generator tool.
- Complete domain validation. Choose one of two methods: respond to a verification email sent to an approved admin address at your domain, or add a CNAME or TXT record to your domain’s DNS. Both options take only a few minutes.
- Receive your certificate files. Once Sectigo confirms domain ownership, the certificate files are delivered to your inbox, typically within minutes.
- Install on your server. Upload the certificate and intermediate CA files to your web server. SSL Dragon provides step-by-step installation guides for all major server platforms, and our support team is available if you need help.
Sectigo EssentialSSL Wildcard vs. Other Sectigo Wildcard Certificates
Sectigo offers several wildcard SSL certificates at different price points and validation levels. The table below shows how they compare.
| Feature | EssentialSSL Wildcard | PositiveSSL Wildcard | InstantSSL Premium Wildcard | Sectigo OV Wildcard SSL |
|---|---|---|---|---|
| Validation | DV | DV | OV | OV |
| Encryption | 256-bit | 256-bit | 256-bit | 256-bit |
| Warranty | $10,000 | $50,000 | $250,000 | $250,000 |
| Site Seal | Static | Static | Dynamic | Dynamic |
| Issuance Time | Minutes | Minutes | 1–2 days | 1–2 days |
| Price | $68.66/yr | $56.33/yr | ~$122/yr | ~$416/yr |
| Best For | Basic sites, personal projects | Budget-first buyers | Business sites needing OV trust | Enterprises, regulated industries |
EssentialSSL Wildcard and PositiveSSL Wildcard share the same encryption, DV validation process, and issuance speed. The practical differences are price and warranty: PositiveSSL Wildcard costs less per year and carries a higher warranty ($50,000 vs. $10,000). Both are solid choices if you need a cheap wildcard SSL with DV coverage. EssentialSSL Wildcard remains one of the most popular options among SSL Dragon customers.
If your website handles transactions or user accounts and you need your organization’s name verified in the certificate, consider InstantSSL Premium Wildcard or Sectigo OV Wildcard SSL. Organization Validation (OV) certificates require business verification and take 1 to 2 days to issue, but they provide a higher level of trust and come with a dynamic site seal.
Formerly Known as Comodo EssentialSSL Wildcard
Sectigo operated under the name Comodo CA until 2018, when the company rebranded. The EssentialSSL Wildcard certificate sold today is the same product that was previously available as the Comodo EssentialSSL Wildcard. The technical specifications, validation process, and issuing CA infrastructure remain unchanged. If you used a Comodo EssentialSSL Wildcard in the past, the Sectigo version is its direct continuation, and renewals follow the same straightforward process. You may also see this product referenced as the Essential SSL Wildcard or Comodo Essential SSL Wildcard.
For the full range of certificates from this CA, see our Sectigo SSL certificates page.
Frequently Asked Questions
What subdomains does the Sectigo EssentialSSL Wildcard secure?
It secures unlimited subdomains at the first level under one domain name. A certificate issued for *.yourdomain.com covers blog.yourdomain.com, shop.yourdomain.com, mail.yourdomain.com, and any other subdomain at that level, including subdomains you add after issuance. It does not cover second-level subdomains such as app.shop.yourdomain.com.
How fast is the Sectigo EssentialSSL Wildcard issued?
Typically, within minutes. As soon as you complete domain validation through email or DNS, Sectigo processes and delivers the certificate files.
Does the Sectigo EssentialSSL Wildcard support multi-domain (SAN)?
No. This certificate covers a single domain and its subdomains. If you need to secure multiple different domain names with wildcard coverage, consider a multi-domain wildcard certificate instead.
What is the difference between EssentialSSL Wildcard and PositiveSSL Wildcard?
Both are DV wildcard certificates from Sectigo with identical encryption strength (256-bit) and the same validation process. PositiveSSL Wildcard is priced lower and includes a higher warranty ($50,000 vs. $10,000). The difference comes down to Sectigo’s product line branding rather than technical capability.
Is the Sectigo EssentialSSL Wildcard the same as the Comodo EssentialSSL Wildcard?
Yes. Comodo CA rebranded to Sectigo in 2018. The EssentialSSL Wildcard certificate is technically the same product under the new brand, with no changes to encryption, validation, or CA infrastructure.
Can I install this certificate on multiple servers?
Yes. The certificate includes unlimited server licensing. You can install it on as many servers as needed without paying additional fees.
What does the $10,000 warranty cover?
The warranty covers financial damages that result from a data breach caused specifically by a flaw in the certificate, such as a mis-issuance by Sectigo. It does not cover breaches caused by server misconfigurations, software vulnerabilities, or other factors outside the certificate itself.
Does this certificate support both RSA and ECC?
Yes. Sectigo SSL certificates support both RSA and ECC (Elliptic Curve Cryptography) key algorithms. You select your preferred algorithm when generating the CSR.
