Sectigo® OV + Wildcard Information

The Sectigo® OV + Wildcard SSL Certificate secures a domain and unlimited subdomains at a single wildcard position, written as *.example.com, and carries a verified organization identity. It confirms your organization through Organization Validation (OV) and protects every covered name with strong encryption.

It suits businesses that run many subdomains and want a checked identity to sit behind each of them. The verified details are recorded inside the SSL Certificate and apply to every covered name, from the root domain through to each subdomain.

This SSL Certificate performs server authentication and can secure a service on any port. Common uses include websites, webmail, e-mail servers running Simple Mail Transfer Protocol (SMTP) and Internet Message Access Protocol (IMAP), Virtual Private Network (VPN) servers, remote desktop, and network appliances or routers.

More broadly, it works with any other server, software, or device that accepts an SSL Certificate to secure a connection from one point to another. For information about Client Authentication 🔗 please read about global regulated changes prior to purchase.

Secures Domain and Unlimited Subdomains 🔗	Organization Validation 🔗
USD $1,000,000 Relying Party Warranty 🔗	2048-bit Industry Standard SSL Certificate
Multiple Year Orders Available	Delivered Via E-Mail
Includes the Trustico® Site Seal 🔗	Unlimited Server Licenses
Optional Installation Service 🔗	Trustico® No Risk Refund Policy 🔗
Unlimited Reissue Policy 🔗	99.9% Web Browser Ubiquity 🔗

The sections below explain what the Sectigo® OV + Wildcard SSL Certificate covers, how it is validated, and how to put it in place.

Wildcard Coverage

A wildcard SSL Certificate secures unlimited subdomains at one label position. Ordering *.example.com covers any name directly under example.com, such as www.example.com, shop.example.com, and account.example.com, and the root domain example.com is included at no extra cost.

Coverage applies to the single level where the asterisk sits. A deeper name such as api.eu.example.com falls outside *.example.com and needs its own wildcard, written as *.eu.example.com. The verified organization identity applies to every covered name. Understand Wildcard Coverage 🔗

Organization Validation

Organization Validation (OV) confirms that a real, registered organization stands behind the domain. The Certificate Authority (CA) checks your legal existence, registered address, and control of the domain against official records and independent sources before the wildcard SSL Certificate is issued.

Once all requirements are provided and the Certificate Authority (CA) has processed them, the SSL Certificate is issued within minutes. Automated checks handle much of the work, though some steps may need someone at your organization to respond or confirm details. Understand Organization Validation 🔗

The verified organization details are recorded inside the SSL Certificate itself and can be seen by inspecting it. They are not shown in the browser address bar, which looks the same as it does for a domain-validated SSL Certificate. The value is in the checked identity carried within the SSL Certificate, applied across every covered name.

If your organization has already been pre-validated, the process is streamlined and the SSL Certificate can be issued right away. Organizations that expect to order can choose to complete validation in advance; otherwise validation proceeds as normal once your order is submitted. Read the Validation Requirements 🔗

Domain Control Validation

Alongside the organization checks, control of the domain is confirmed for the wildcard. For a wildcard this is done by publishing a Domain Name System (DNS) record or by replying to an e-mail sent to one of the approved addresses for the domain.

The file-based method available for single names cannot be used for a wildcard, since a wildcard is not tied to one web address where a file could be found. Read about Wildcard Validation 🔗

USD $1,000,000 Warranty

Every Sectigo® OV + Wildcard SSL Certificate carries a USD $1,000,000 Relying Party Warranty that covers the secured names. It gives financial cover in the unlikely event that the Certificate Authority (CA) issues the SSL Certificate in error, a higher level of cover than the domain-validated wildcards.

You can reissue the SSL Certificate as often as you need at no charge, for example after changing your Private Key or moving servers. Review Warranty Details 🔗

Encryption and Protocols

The SSL Certificate uses a 2048-bit RSA key with 256-bit symmetric encryption, over the Transport Layer Security (TLS) 1.2 and 1.3 protocols, with SHA-256 hashing. Every covered subdomain connects over HTTPS with the padlock shown.

It also supports the encryption requirements of the Payment Card Industry Data Security Standard (PCI DSS). Compare Encryption Algorithms 🔗

Trustico® Site Seal

Every order includes a complimentary Trustico® site seal that you can display across your subdomains to reassure visitors. It works well on payment, sign-up, and contact pages, where confidence matters most.

The seal is added with a short piece of HTML. Explore the Trustico® Site Seal 🔗

Browser Compatibility

The SSL Certificate is trusted by around 99.9% of web browsers, including Chrome, Firefox, Safari, and Edge. Mobile devices on iOS and Android trust it without any additional configuration.

This wide recognition means visitors reach your secure site without warnings. Understand Browser Compatibility 🔗

One SSL Certificate Across Your Subdomains

A wildcard replaces the separate SSL Certificates you would otherwise order for each subdomain, so one SSL Certificate and a single expiry date cover the whole set, each carrying the same verified organization identity. Management stays simple as the subdomain count rises.

Because new subdomains at the covered level are secured on their own, you can add services without ordering anything further. The saving grows with the number of subdomains one wildcard replaces.

Unlimited Server Licenses

The wildcard SSL Certificate can be installed on as many servers as you need at no extra cost. This suits subdomains that run on different infrastructure, such as separate hosts, cloud platforms, or content delivery endpoints.

The same SSL Certificate and Private Key are deployed to each server that serves a covered name. Where a setup needs its own key per server, you can reissue as often as needed at no charge.

Verified Identity in Regulated and Business Settings

A verified organization identity is valued in regulated and business-to-business settings, where the other party wants confidence about who operates a service. Carrying that checked identity across every subdomain supports the due diligence others may expect.

It does not, on its own, meet any specific compliance obligation, which depends on your own controls and circumstances. It is one useful signal of a legitimate operator, applied consistently across your subdomains. Compare Validation Levels 🔗

Installation

Installation begins with a Certificate Signing Request (CSR) that names the wildcard, written as *.example.com, together with your organization details. After validation, you deploy the issued SSL Certificate with the supplied intermediate chain files. Platform guides cover Apache, Nginx, Microsoft Internet Information Services (IIS), and other common web servers and control panels.

If you would rather have it handled for you, the Premium Installation service can carry out the work. Access Installation Guides 🔗

Support and Resources

The Trustico® website provides a large set of free guides, frequently asked questions, and online tools covering ordering, validation, and installation, so most questions can be answered without contact.

For help with placing an order or completing validation, the Trustico® team is available through the published contact methods. Browse the Trustico® Support Resources 🔗

Refund Policy and Price Promise

An order is a license that unlocks once the Certificate Authority (CA) completes validation. If validation cannot be completed beforehand, the value of the order is held as Trustico® Prepaid Credit for use on another SSL Certificate, domain, or product.

Once the SSL Certificate has been validated and issued, the license is active and refunds no longer apply. Requests outside this pre-validation protection are considered at the discretion of Trustico® through the refund request form. Review the No Risk Refund Policy 🔗

A price match against advertised prices from other providers applies both before and after you order, so your pricing stays competitive. Learn About The Trustico® Price Promise 🔗

Your SSL Certificate License

Your purchase is an SSL Certificate license for the term you choose, such as one or two years. A multiple year license fixes the current pricing for the whole term.

Because an individual SSL Certificate has a maximum validity set by industry rules, currently 200 days and subject to change, a longer license is kept current by reissuing the SSL Certificate during the term rather than by a single SSL Certificate covering the full period.

Reissues are free and unlimited across the license, and each gives the largest validity left on the term, so a reissue late in the license runs only to its end. The wildcard coverage, secured names, and verified organization identity carry across each reissue. Manage your reissues in the Trustico® Tracking System 🔗

A reissue is not the same as buying a new license. A reissue replaces the SSL Certificate within the license you hold, while a new license is a separate paid order, best placed about two weeks before the term ends to allow time to validate and install.

A notice is sent before the license period ends, though tracking the SSL Certificates installed on your own servers stays with you. You can read expiry dates from the server, use a monitoring service, or download calendar files for the license and SSL Certificate dates from the tracking system.

Suitable Uses

The Sectigo® OV + Wildcard SSL Certificate suits organizations that run many subdomains and want a verified identity to travel with each of them, such as a shop, an account portal, a partner area, and a support portal under one domain. One wildcard secures them all at the covered level.

It fits businesses and institutions dealing with other organizations, where a checked identity carries weight, and teams that add subdomains often. Where a single name needs securing, the organization-validated single site version is the simpler choice.

Other Options

Where you need to secure only one name rather than a set of subdomains, the single site version carries the same Organization Validation on a single domain. Compare OV Single Site 🔗

Where a verified organization identity is not required, the domain-validated wildcard secures the same subdomains at a lower price, validated by domain control alone. Compare DV Wildcard 🔗