DigiCert Secure Site Wildcard SSL: Review 2026
One domain plus unlimited first-level subdomains at the Secure Site OV tier. A pattern noted across this DigiCert review series surfaces again here: one specific reseller consistently cites a lower warranty than every other source for the same certificate.
A Warranty Pattern Worth Flagging
Across the DigiCert products checked for this review series, one specific reseller has repeatedly listed a lower warranty figure than every other independent source for what appears to be the identical certificate. That pattern shows up again here.
What the sources actually say
This may reflect a different underlying agreement or bundle specific to that reseller rather than an error. Given that the pattern now repeats across multiple DigiCert products, treat that specific reseller's warranty figures as needing direct confirmation before purchase rather than assuming they match the more commonly cited number.
First-Level Subdomains Only
This certificate secures a base domain plus every subdomain sitting directly beneath it using an asterisk placeholder at issuance. Coverage stops at that first subdomain level. This is standard behavior across every wildcard certificate covered in this review series regardless of certificate authority, not a limitation specific to DigiCert.
A PCI Compliance Caution
At least one reseller's page states this certificate "meets PCI requirements" and "ensures security of credit card transactions." A wildcard certificate encrypts the connection and supports parts of a PCI DSS compliance effort, but PCI DSS is a broader standard covering network security, access controls, and data handling well beyond what any single certificate provides. Treat this certificate as one component of a PCI compliance program, not a certification that independently satisfies the standard.
How Business Verification Works
Secure Site Wildcard runs the standard light OV verification found across the Secure Site tier. Business validation stays reusable for 27 months on subsequent orders once completed.
Domain Control Validation
DNS record or email confirmation for the base domain. HTTP file validation is not accepted for wildcard entries, consistent with CA/Browser Forum rules applying to every certificate authority.
Business Verification
Confirms company registration, phone number, address, and includes a callback verification. Completes once for the base domain and covers all subdomains without separate checks per subdomain.
Priority Validation Processing
Secure Site subscribers receive expedited processing. The 27-month OV reuse window means subsequent orders skip this step entirely within that window.
Certificate Specifications
Reseller Pricing
The $560 listing appears to reference the Basic OV Wildcard tier given its $1,000,000 warranty figure, consistent with the Basic tier documented elsewhere in this series, rather than the Secure Site tier this page focuses on. Confirm which specific tier a given price refers to before comparing across resellers.
| Reseller | Price | Warranty Stated |
|---|---|---|
| TheSSLStore | $560/yr | $1,000,000 — likely Basic tier, not Secure Site |
| Certera | $1,755.99/yr | $1,750,000 |
| CheapSSLWeb | $1,755.99/yr | $1,750,000 |
| GoGetSSL | $1,879.26/yr | $1,500,000 — lower than all other sources |
Key Changes for 2026
Maximum validity per issuance dropped to 200 days effective February 20, 2026 for DigiCert. For a wildcard certificate, the DNS-based validation requirement for the wildcard entry means setting up automated DNS validation ahead of the first renewal cycle is worth doing. The 27-month business validation reuse window means that element of the renewal does not need to repeat within that period.
Where It Wins and Loses
Where It Wins
- Covers unlimited first-level subdomains under one domain at a consistent $1,750,000 warranty across most sources
- 27-month business validation reuse window reduces paperwork on subsequent orders
- Grows automatically to cover new first-level subdomains without reissue
- VA and daily malware scanning included standard
Where It Loses
- One reseller consistently lists a lower warranty across multiple DigiCert products. Confirm directly before purchase.
- Second-level subdomains are outside scope
- HTTP file validation not accepted for the wildcard entry
- PCI compliance framing on at least one listing overstates what the certificate accomplishes
- SSL.com OV Wildcard delivers comparable OV subdomain coverage at a substantially lower price
Secure Site Wildcard vs. Secure Site Multi-Domain
Both sit at the same Secure Site OV tier. The choice is entirely about structure: subdomains under one domain, or several distinct domains. Neither covers both needs at once. A business with both multiple domains and active subdomains should look at DigiCert's Flex products, which can mix standard and wildcard domains on one certificate.
Secure Site Wildcard (this page)
Secure Site Multi-Domain
Ideal Use Cases
Good fit
- Businesses with one domain and multiple active subdomains that want OV-level assurance across all of them
- Organizations making repeat certificate purchases within the 27-month validation reuse window
- Sites that will use the included vulnerability and malware scanning
Look elsewhere
- Businesses with multiple distinct domains. Secure Site Multi-Domain or a Flex product fits that structure better.
- Domains needing second-level subdomain coverage. A separately scoped wildcard is required.
- Cost-conscious buyers. SSL.com OV Wildcard delivers comparable OV subdomain coverage at a substantially lower price.
- Buyers relying on a single reseller's warranty figure without confirming it directly
