Home / Certificates / Multi-domain (SAN) / Thawte SSL Web Server Multi-Domain Wildcard
Thawte SSL Web Server Multi-Domain Wildcard
Thawte SSL Web Server Multi-Domain Wildcard is an organisation-validated (OV) certificate - your verified company name in the certificate, securing multiple domains under one certificate.
Specification
Lifecycle facts update by date- Validation
- Organisation (OV) — domain control + registered-business checks
- Covers
- 2 domains included, up to 247
- Issuance
- Instant
- Certificate lifetime
- Up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029
- Validation reuse
- 200 days now · 100 days from 15 Mar 2027
- CAA record
- 0 issue "digicert.com"
- Keys
- RSA 2048-bit or stronger · ECC P-256 / P-384
- Reissues
- Free and unlimited for the plan
- Server licensing
- Unlimited servers
- Relying-party warranty
- US$500,000
- Site seal
- Dynamic
- Issued by
- Thawte
Lifecycle on this plan
- 1Pay onceInvoice issued at payment.Day 0
- 2First certificateUp to 200 days, issued Instant after validation.Day 0–3
- 3Reactivate freeWe email you before it ends; one click issues the next certificate for the rest of the plan.Before expiry
- 4Plan endsRenew only to go beyond the plan end date.Plan end
Included
Included · not in this product- Organization Validated✓
- Multi-domain (SAN)✓
- Highest Level of Validation—
- Business Validated✓
- SAN / Multi-Domain Support✓
- Wildcard Support—
- Dynamic Site Seal✓
- Unlimited Server Licensing✓
- Unlimited Reissues✓
- Vulnerability Assessment—
- Malware Scan—
- Validation guidance · renewal reminders · assisted resolution✓
Questions
How fast is it issued?
Typically instant: the CA verifies your registered business as well as the domain. Keeping company registration details handy speeds it up.
Do I pay again when this certificate expires?
Not within your plan. Certificates now last up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029. When one nears its limit, reactivate it free from your dashboard; you pay again only to go beyond your plan's end date.
Can I use an ECC key?
Yes — generate a P-256 or P-384 CSR on your server, or with our CSR generator, which runs in your browser. RSA 2048-bit or stronger works too.
Which validation method should I use?
Pick DNS, HTTP file or email after purchase. DNS is the easiest to keep in place for every certificate in your plan. The CA checks it from several networks, so the record must be public — the DNS check on your certificate page shows exactly what it will look for.
My domain has CAA records — will issuance fail?
Only if they don't allow this CA. If your domain publishes CAA records, one must allow digicert.com. The DNS check on your certificate page flags this and shows the exact record to add.
Can I reissue with a new private key?
Yes — reissues are free and unlimited for your whole plan, from your dashboard (new key, new CSR).