SSL certificates can be valid for at most 199 days. By 15 March 2027 the limit becomes 99 days, for DigiCert certificates from 24 February 2027. Read more →

SSL Certificates

SSL certificate Cheap SSL DV SSL Wildcard SSL Multi-Domain (SAN) OV & EV SSL

Specialty Certificates

Code Signing Document Signing Email / S/MIME VMC / BIMI
View all products
In effect now Certificate Lifetime

Automation

Overview AutoDNS FairSSL vs Let's Encrypt

Platforms

Windows Setup Linux & Kubernetes Appliances ACME Clients

Tools

SSL Scanner Certificate Decoder CAA Generator

Guides

Windows Server Linux & Open Source All guides

Company

About Us Contact Installation Service
News

Language

Dansk Svenska English

Currency

Login Create Account
Thawte

Thawte SSL123 Wildcard SAN

DV Max 199 days 99 days from 24 February 2027
Recommended domain validated wildcard SSL certificate from Thawte.
Validation
Domain Validation
Type
Wildcard
Certificate Authority
DigiCert

SAN pricing

Type Price per SAN/yr
SAN FQDN €47
SAN Subdomain €47
SAN Wildcard €134

Free names: when ordering via the website, the base name (non-www, or the base domain of a wildcard) is added automatically for free. On the DigiCert family, names the wildcard covers are also free. With ACME you list all names yourself. Learn more.

256-bit encryption Free reissuance AutoDNS Root compatibility Windows Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 Microsoft's root store. It updates automatically on every supported Windows version. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Apple Root Store The root is included from 2025 With 1 Cross-Sign the root is included from 2013 Apple's root store in iOS and macOS. It follows the operating system version, so older devices never receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Android Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 Android's built-in root store. It follows the Android version, and older phones rarely receive new roots. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Linux Root Store The root is included from 2022 With 1 Cross-Sign the root is included from 2013 The Mozilla NSS bundle, shipped by Debian, Ubuntu and RHEL as ca-certificates. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.Java Root Store The root is included from 2024 With 1 Cross-Sign the root is included from 2013 The Java cacerts file. It follows the Java update installed on the server. For older clients to validate, the server has to send the cross certificate on top of the ordinary intermediate. On Windows Server, Server Authentication also has to be turned off for the new root on the server: otherwise Schannel builds the short chain to the new root and the cross certificate is never sent.8.4of 10Requires 1 Cross-SignCovered by the root certificate itselfCovered through one cross-signed certificate Max 249 SAN

About Thawte SSL123 Wildcard SAN

Thawte's domain validated Wildcard SSL Certificate protects an unlimited number of subdomains to a primary domain. The certificate is particularly suited to protect several sites where you do not know all the names to be used in advance.

When adding multiple wildcards as a SAN, remember to order both *.your-domain.com and your-domain.com to give the same coverage as buying the wildcard as a single certificate.

This certificate supports multiple FQDN/DNS names from multiple different domains.

To order and for the establishment of CSR the domain name is signed as *.domain.com 
 
Note that some clients do not support wildcard certificates eg. for the protection of pop3.

A free SiteSeal is included with this certificate.

Reissue schedule

Certificates must be reissued before they expire within the order period. The timeline shows when each reissue is needed.

1 year

Order: 1 year
↓ 99-day cap
199d
99d
67d
€
Oct 2026
Issue and install
May 2027
Reissue and install
Aug 2027
Reissue and install
€
Oct 2027
Renew order
+ issue new cert.

from

€228€147 /year excl. VAT
Buy Thawte SSL123 Wildcard Compare certificates
  • 14-day full refund
  • Free phone support
  • No hidden fees
  • Unlimited server installation

Ready to create a free account?

Create a free account and order your first certificate. A DV certificate is issued in under 2 minutes.

Create free account Compare certificates