Product Specifications
| Certificate Authority | Sectigo (formerly Comodo CA) |
| Validation Level | Domain Validation (DV) |
| Domains (Default) | 4 (1 Common Name + 3 SAN) |
| Maximum Domains | 250 |
| Subdomain Coverage | Unlimited (wildcard SAN entries) |
| Encryption | 256-bit |
| Key Size | 2048-bit RSA (ECC also supported) |
| Browser Compatibility | 99.3% |
| Server Licensing | Unlimited |
| Reissues | Unlimited, free |
| Warranty | $10,000 |
| Site Seal | Sectigo Secure (static) |
| Issuance Time | ~5 minutes |
| Money-Back Guarantee | 25 days |
| Compliance | CA/Browser Forum, NIST |
Sectigo PositiveSSL Multi-Domain Wildcard Certificate Features
Secure Multiple Domains and Unlimited Subdomains
The Sectigo PositiveSSL Multi-Domain Wildcard SSL certificate is the only certificate type that secures both multiple domains and unlimited subdomains in one installation. The standard package covers 4 domains, one primary domain plus 3 Subject Alternative Name (SAN) items, and you can add up to 250 total. Each SAN field accepts either a standard domain (secondsite.com) or a wildcard entry (*.secondsite.com) that automatically covers every first-level subdomain.
You can add or remove domains at any time by reissuing the certificate, free and unlimited.
Example coverage with just 4 SAN slots:
| SAN Slot | Entry | Covers |
|---|---|---|
| Common Name | yourdomain.com | yourdomain.com |
| SAN 1 | *.yourdomain.com | shop, blog, mail, app — unlimited |
| SAN 2 | secondsite.com | secondsite.com |
| SAN 3 | *.secondsite.com | api, portal, cdn — unlimited |
Issued in 5 Minutes. No Paperwork
This is a domain-validated certificate. Sectigo only verifies that you own or control the listed domains, no business documents, no callbacks, no waiting days. Choose from three validation methods (email, DNS CNAME, or HTTP file), complete verification, and your certificate is issued within minutes.
Enterprise-Grade Encryption at Budget-Friendly Pricing
PositiveSSL is Sectigo’s entry-level DV product line, delivering the same 256-bit encryption and 2048-bit RSA signature key as higher-tier Sectigo products. Elliptic Curve Cryptography (ECC) is also available for servers that support it. You get the full security standard from the world’s largest commercial Certificate Authority, and it’s the cheapest multi-domain wildcard SSL certificate on the market. Compared to buying separate wildcard or single-domain certificates for each of your domains, a single Positive Multi-Domain Wildcard SSL saves you hundreds of dollars per year.
Works on Nearly Every Platform
Install this certificate on virtually any server or email client, including Apache, Nginx, IIS, cPanel, Plesk, and Microsoft Exchange. With 99.3% browser and device compatibility, Chrome, Firefox, Safari, and Edge will display the padlock icon and HTTPS prefix on every secured domain and subdomain.
Ideal For
- Small businesses managing multiple websites with subdomains
- Web agencies securing client domains under a single certificate
- Developers protecting staging, testing, and production environments across projects
- E-commerce operators running multiple storefronts on separate domains
- Mail server administrators securing multiple domains on Microsoft Exchange or similar platforms
Frequently Asked Questions
How many domains and subdomains can I secure?
4 domains by default (1 primary + 3 SAN). You can add up to 250 total SAN items at checkout or later via a free reissue. Each wildcard SAN entry (*.domain.com) covers unlimited first-level subdomains for that domain.
Can I add or remove domains after issuance?
Yes. Reissue the certificate at any time, free and unlimited, to modify your SAN items.
What’s the difference between this and the Sectigo OV Multi-Domain Wildcard?
Both offer the same multi-domain wildcard functionality and encryption. The difference is validation: the PositiveSSL Multi-Domain Wildcard DV certificate only verifies domain ownership and is issued in minutes with no paperwork. The OV version verifies your business identity, takes 1–2 days, and carries a $1,000,000 warranty.
Is Sectigo the same as Comodo?
Yes. Sectigo was formerly Comodo CA, rebranded in 2018. Same Certificate Authority, same root certificates, same trust.
Does it work with Microsoft Exchange?
Yes. Multi-domain certificates using SAN fields, also called Unified Communications Certificates (UCC), are fully compatible with Microsoft Exchange and Office Communications servers.
Does a wildcard SAN cover second-level subdomains?
No. A wildcard entry like *.yourdomain.com covers first-level subdomains only (shop.yourdomain.com, not staging.shop.yourdomain.com). To cover second-level subdomains, add a separate wildcard SAN for that level (e.g., *.shop.yourdomain.com).
Can I install this on multiple servers?
Yes. Unlimited server licensing is included at no extra cost.
What encryption does this certificate use?
256-bit symmetric encryption with a 2048-bit RSA signature key. ECC (Elliptic Curve Cryptography) is also supported as an alternative.
