What Domains Can Wildcard-Domain Certificates Support?

You can purchase wildcard-domain certificates in Huawei Cloud SCM to protect a single domain name of the server and all its subdomains of the same level. Wildcard domains are supported by OV, OV Pro, and Geo Trust entry-level DV (Basic) certificates.

If you have multiple subdomain names at the same level, you do not need to purchase and install certificates for each subdomain name when using a wildcard-domain certificate.

For wildcard-domain certificates, only those associated with root domain names support the domain names. For example:
- A certificate associated with the wildcard domain *.huaweicloud.com (a root domain) protects huaweicloud.com and other domain names of the same level. No additional certificate needs to be purchased for this.
- A certificate associated with the wildcard domain *.p1.huaweicloud.com (not a root domain) will not protect p1.huaweicloud.com (a different level domain). It can only protect domain names of the same level. To protect p1.huaweicloud.com, you would need to purchase a new certificate.
Once your digital certificate is issued, the associated domain cannot be changed.

To purchase a wildcard-domain certificate, you need to pay attention to the domain name matching rules. Only subdomain names of the same level can be matched. For details about the domain name levels, see Domain-related Concepts.

Table 1 provides matching examples.

**Table 1** Examples of wildcard-domain matching rules
Domain name	Matched Domain Name	Unmatched Domain Name
*.example.com	Domain names, such as abc.example.com, sport.example.com, and good.example.com	Domain names, such as mycard.good.example.com and mycalc.good.example.com
*.good.example.com	Domain names, such as mycard.good.example.com and mycalc.good.example.com	Domain names, such as abc.example.com, sport.example.com, and good.example.com