What domain names are supported by wildcard certificates, wildcard certificate rules - Certificate Management Service

Alibaba Cloud Certificate Management Service supports wildcard certificates. A wildcard certificate can protect a single primary domain name and all its same-level subdomains. Both Domain Validated (DV) and Organization Validated (OV) certificates support wildcard domain names.

Overview

If you have multiple same-level subdomains, you can purchase a single wildcard certificate to protect all of them instead of buying a separate certificate for each subdomain. A wildcard certificate protects a single primary domain name and all same-level subdomains under that primary domain.

Matching rules

A wildcard certificate can only match same-level subdomains. Cross-level matching is not supported. For example, a certificate for *.aliyundoc.com can match subdomains such as demo.aliyundoc.com and learn.aliyundoc.com, but cannot match domains such as guide.demo.aliyundoc.com or developer.demo.aliyundoc.com.
You can only apply for a certificate with a single wildcard domain. Certificates that contain multiple wildcard domains are not supported.
To include multiple wildcard domains in a single certificate, you can combine multiple certificates of the same brand and type to generate a multi-wildcard certificate. For more information, see Combine certificates.

Complimentary domain names

The rules for complimentary domain names depend on the certificate brand, domain validation method, and other factors. For more information, see Complimentary domain names for certificates.

Note

If the domains bound to a certificate include both single domains and wildcard domains, for example, *.aliyundoc.com,demo.example.com, you can combine multiple certificates of the same brand and type to generate a hybrid domain certificate. For more information, see Combine certificates.