What Domains Can Wildcard-Domain Certificates Support?

You can purchase wildcard-domain certificates in Huawei Cloud SCM to protect a single domain name of the server and all its subdomains of the same level. Wildcard domains are supported by OV, OV Pro, and Geo Trust entry-level DV (Basic) certificates.

If you have multiple subdomain names at the same level, you do not need to purchase and install certificates for each subdomain name when using a wildcard-domain certificate.

• For wildcard-domain certificates, only those associated with root domain names support the domain names. A wildcard-domain certificate can protect matched domain names of the same level but not the tertiary domain names. The matching rules are as follows:
  • If the primary domain name for a wildcard-domain certificate is a top-level domain name, the certificate can be used for the primary domain name the wildcard domain matches by default. For example, if you purchase a wildcard-domain certificate for *.huaweicloud.com, you can use the certificate for huaweicloud.com. You do not need to purchase another certificate for huaweicloud.com.
  • If the primary domain name for a wildcard-domain certificate is not a top-level domain name, the certificate cannot be for the domain names with levels unmatched the wildcard domain name. For example, a wildcard-domain certificate for *.p1.huaweicloud.com cannot be used for p1.huaweicloud.com or huaweicloud.com. To protect p1.huaweicloud.com or huaweicloud.com, you need to purchase a new certificate.
• Once your digital certificate is issued, the associated domain cannot be changed.

To purchase a wildcard-domain certificate, you need to pay attention to the domain name matching rules. Only subdomain names of the same level can be matched. For details about the domain name levels, see Domain-related Concepts.

Table 1 provides matching examples.