Wildcard SSL and SAN SSL certificates both expand certificate coverage beyond a single hostname, but they solve different problems. The right choice depends on whether you need to protect many subdomains under one domain or several different domain names.
What wildcard SSL is designed for
A wildcard certificate is designed to cover a base domain and eligible subdomains under that domain. It can be useful when you operate services such as app.example.com, shop.example.com and support.example.com.
What SAN SSL is designed for
A SAN, or Subject Alternative Name, certificate can cover multiple specified hostnames within one certificate. That can include different domains or subdomains depending on the certificate product.
Wildcard SSL vs SAN SSL
| Need | Wildcard SSL | SAN SSL |
|---|---|---|
| Many subdomains under one domain | Strong fit | Possible depending on names listed |
| Multiple different domains | No | Designed for multiple listed names |
| Unknown future subdomains | Often easier | Names generally need to be listed |
Check what your hosting already includes
Some hosting plans include SSL. Before buying a separate certificate, confirm what is already covered.
Compare current wildcard SSL and multi-domain SAN SSL options based on the hostnames you need to protect.
Plan renewal for every certificate type
Wildcard and SAN certificates can affect many hostnames at once. Use our SSL expiration and renewal guide to plan replacement, validation and monitoring before an existing certificate expires.