SSL certificates can be valid for at most 199 days. By 15 March 2027 the limit becomes 99 days, for DigiCert certificates from 24 February 2027. Read more →
GlobalSign

GlobalSign Domain Validation SAN Wildcard SSL

DV Max 199 days 99 days from 14 March 2027

Most Flexible Domain Wildcard SAN SSL that increases wildcard compatibility.

Validation
Domain Validation
Type
Multi-domain (SAN)
Certificate Authority
GlobalSign

SAN pricing

Type Price per SAN/yr
SAN Subdomain €53
256-bit encryption Free reissuance Root compatibility Windows Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2009 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2021 With 1 Cross-Sign the root is included from 2009 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2009 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.6of 10Requires 1 Cross-SignCovered by the root certificate itselfCovered through one cross-signed certificate Max 99 SAN

About GlobalSign Domain Validation SAN Wildcard SSL

GlobalSign Domain Wildcard Certificate will protect an unlimited number of subdomains to a primary domain. The certificate is particularly suited to protect several sites where you do not know all the names to be used in advance. The product includes Premium features such as Phone Support, Free Reissues, Unlimited Server License and Site Seal.

Because the certificate supports SAN names, it is possible to add specific subdomains needed for clients not compatible with wildcard SSL and for subdomains not supported by the wildcard e.g. sub-sub domains like www.secure.fairssl.net to a *.fairssl.net certificate.
The SAN names only support sub domains. It is not possible to add SAN names with *. in them.

Note that some clients (like IMAP) and older mobile phones do not support wildcard certificates, regardless of selected issuer.

When ordering this certificate, ensure the domain to secure begins with *. for both the order and the Common Name in the CSR. The certificate will be accepted for any subdomain, where text is replaced by the * or for the domain with out the *..
Example of correct ordered name: *.fairssl.net This will work for domains like www.fairssl.net, fairssl.net, abc-123.fairssl.net, abc.fairssl.net It will NOT work for domains like: www.fairssl.dk, www.abc.fairssl.net

Reissue schedule

Certificates must be reissued before they expire within the order period. The timeline shows when each reissue is needed.

1 year

Order: 1 year
↓ 99-day cap
199d
99d
67d
€
Oct 2026
Issue and install
Apr 2027
Reissue and install
Aug 2027
Reissue and install
€
Oct 2027
Renew order
+ issue new cert.

from

€600€348 /year excl. VAT
Buy GlobalSign DV SAN Wildcard Compare certificates
  • 14-day full refund
  • Free phone support
  • No hidden fees
  • Unlimited server installation

Ready to create a free account?

Create a free account and order your first certificate. A DV certificate is issued in under 2 minutes.