what domain names are supported by wildcard certificates, wildcard certificate rules - Certificate Management Service

Alibaba Cloud Certificate Management Service supports wildcard certificates. You can use a wildcard certificate to protect a primary domain name and all its subdomains at the same level on a server. Both domain validated (DV) and organization validated (OV) certificates support wildcard domain names.

If you have multiple subdomains at the same level, you can purchase a single wildcard certificate instead of a separate certificate for each subdomain. The following table describes the matching rules for wildcard certificates.

Category		Rule
Matching rules		A certificate for `*.aliyundoc.com` matches subdomains at the same level, such as `demo.aliyundoc.com` and `learn.aliyundoc.com`. It does not match subdomains at other levels, such as `guide.demo.aliyundoc.com` and `developer.demo.aliyundoc.com`. You can request a certificate for a single wildcard domain. Certificates for multiple wildcard domains are not supported. To include multiple wildcard domain names in one certificate, combine multiple certificates of the same brand and type to generate a multi-wildcard certificate. For more information, see Combine certificates.

Complimentary rules		The complimentary rules depend on factors such as the certificate brand and domain validation method. For more information, see Complimentary domain names for certificates.

Note

To create a certificate that covers both single and wildcard domain names, such as *.aliyundoc.com,demo.example.com, you can combine multiple certificates of the same brand and type to generate a hybrid domain certificate. For more information, see Combine certificates.