{"id":19019,"date":"2024-05-25T17:26:43","date_gmt":"2024-05-25T17:26:43","guid":{"rendered":"https:\/\/hostvento.com\/kb\/web-hosting\/a-complete-guide-to-wildcard-certificates\/"},"modified":"2024-06-16T16:01:17","modified_gmt":"2024-06-16T16:01:17","slug":"a-complete-guide-to-wildcard-certificates","status":"publish","type":"docs","link":"https:\/\/www.hostvento.com\/kb\/docs\/hosting-faqs\/a-complete-guide-to-wildcard-certificates\/","title":{"rendered":"A Complete Guide to Wildcard Certificates"},"content":{"rendered":"\n<p>Since v.0.13.0, Wildcard certificates are supported by the FleetSSL cPanel plugin.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Definition of Wildcard Certificate<\/h2>\n\n\n\n<p>A wildcard SSL certificate is one that is good for any subdomain of one or more domains. An asterisk (*.) prefix on any of the names it is issued for, such as *.example.org or *.staging.example.org, serves as a wildcard certificate&#8217;s identifying mark.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why do I need an SSL Certificate?<\/h3>\n\n\n\n<p>As per our suggestion, majority of users don\u2019t need wildcards. They are useful in the below instances:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You have several (10-100+) subdomains or combination of subdomains.<\/li>\n\n\n\n<li>You have no idea about what subdomains will exist, e.g. when you dynamically give each user\/customer their own subdomain, e.g. when you have a subdomain-based multi-site.<\/li>\n\n\n\n<li>You create new subdomains regularly (at least on a monthly basis).<\/li>\n\n\n\n<li>You are using a wildcard DNS record and require securing all possible domains using SSL.<\/li>\n<\/ul>\n\n\n\n<p>Unless you requirement matches one or more of the listed, we recommend you to use a non-wildcard SSL. They are simple, act quickly to any issue and are safe to manage.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Prerequisites<\/h3>\n\n\n\n<p><strong>DNS Validation is required: Your DNS needs to be hosted with cPanel<\/strong><\/p>\n\n\n\n<p>As per the\u00a0Let\u2019s Encrypt policy, it is compulsory to use DNS-based validation for wildcard certificates.<\/p>\n\n\n\n<p>This means that your domain needs to have its DNS hosted with cPanel\u2019s nameservers, so that cPanel is able to create TXT records to demonstrate control of your domain. If your domain\u2019s DNS is hosted externally, you won\u2019t be able to issue wildcard certificates.<\/p>\n\n\n\n<p>You will able to select the validation method when you go to your certificate issuance.<\/p>\n\n\n\n<p><strong>DNS Cluster Delays (For WHM administrators)<\/strong><\/p>\n\n\n\n<p>When DNS records get updated in cPanel, you won\u2019t be able to see the changes immediately in the attached DNS cluster. This is because cPanel\u2019s DNS is updated asynchronously.<\/p>\n\n\n\n<p>The plugin will wait for 5 second by default after the completion of all the DNS modifications. Though being a fairly conventional delay, it may be adjusted for your specific hosting environment by altering the dns_challenge_delay_secs configuration parameter.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Steps to Issue a Wildcard Certificate<\/h3>\n\n\n\n<p><strong>1. Open the Let\u2019s Encrypt SSL interface:<\/strong><\/p>\n\n\n\n<p>In cPanel, go to the Lets Encrypt SSL interface and select the domain you want to issue certificate for.<\/p>\n\n\n\n<p><strong>2. Select the DNS validation method:<\/strong><\/p>\n\n\n\n<p>Please select an SSL validation method (all are automatic):<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter\"><img decoding=\"async\" src=\"https:\/\/www.hostvento.com\/kb\/hosting-faqs\/wp-content\/uploads\/2018\/03\/select-validation-method-min-300x74.png\" alt=\"\" class=\"wp-image-4428\"\/><\/figure>\n<\/div>\n\n\n<p><strong>3. Select which domains you would like wildcards for:<\/strong><\/p>\n\n\n\n<p>Tick the&nbsp;<strong>\u201cInclude Wildcard?\u201d<\/strong>&nbsp;column for adding the wildcard variant of any domain to your certificate request. It is possible to include several combinations of wildcards and other domains as per your choice on a single certificate.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter\"><img decoding=\"async\" src=\"https:\/\/www.hostvento.com\/kb\/hosting-faqs\/wp-content\/uploads\/2018\/03\/select-wildcard-min-300x144.png\" alt=\"\" class=\"wp-image-4429\"\/><\/figure>\n<\/div>\n\n\n<p>Note that, if you want the certificate to be valid for mail.l33t.website as well as *.mail.l33t.website, you need to tick both&nbsp;<strong>\u2018Include\u2019<\/strong>&nbsp;and&nbsp;<strong>\u2018Include Wildcard?\u2019<\/strong>&nbsp;as the wildcard won\u2019t match the domain by itself.<\/p>\n\n\n\n<p><strong>4. Issue:<\/strong><\/p>\n\n\n\n<p>Click on the&nbsp;<strong>Issue<\/strong>&nbsp;button and wait.<\/p>\n\n\n\n<p>If there is a problem, make sure that your domain is being hosted internally (at your domain registrar, on Route53, Cloudflare, or another external server) and not utilizing the nameservers provided by your cPanel hosting service.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Since v.0.13.0, Wildcard certificates are supported by the FleetSSL cPanel plugin. Definition of Wildcard Certificate A wildcard SSL certificate is one that is good for any subdomain of one or more domains. An asterisk (*.) prefix on any of the names it is issued for, such as *.example.org or *.staging.example.org, serves as a wildcard certificate&#8217;s [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":23377,"menu_order":1469,"comment_status":"closed","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-19019","docs","type-docs","status-publish","hentry","no-post-thumbnail"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/docs\/19019","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/comments?post=19019"}],"version-history":[{"count":1,"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/docs\/19019\/revisions"}],"predecessor-version":[{"id":19021,"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/docs\/19019\/revisions\/19021"}],"up":[{"embeddable":true,"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/docs\/23377"}],"wp:attachment":[{"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/media?parent=19019"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hostvento.com\/kb\/wp-json\/wp\/v2\/doc_tag?post=19019"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}