This will depend on how it is used and what you need to protect. There is a wide variety of SSL certificates to meet the security needs of each buyer.
WildCard SSL Certificate
What makes the SSL WildCard certificate so special is its ability to protect multiple subdomains if they share the same domain name.
Website administrators do not have to worry about managing multiple certificates. All they need is a single SSL WildCard that provides simple administrative management.
With the same Certificate you can secure multiple subdomains if they share the same domain name.
A WildCard certificate requested for *.sudominio.com can secure the following sites:
- www.sudominio.com
- seguro.sudominio.com
- producto.sudominio.com
- info.sudominio.com
- loquesea.sudominio.com
You should keep in mind that the asterisk covers or provides the wildcard service at the Subdomain level that is indicated when requesting the certificate. For example it covers the 1st level of the main domain.
You can also extend the WildCard certificate to multiple physical servers at no cost since they have free licenses.
The WildCard certificate displays an asterisk (*) that allows you to replace unlimited subdomains. It is not necessary to purchase a new certificate, as you can protect all subdomains that have the same domain without the need to change certificates. Website owners do not need to define the subdomain at the time of purchase.
The WildCard certificate can protect multiple first-level subdomains of a main domain, but to protect other levels it is necessary to have other certificates with the appropriate level for that need.
For example, if the certificate is issued in *.sudominio.com, then it cannot protect xxx.subdomain.sudominio.com.
When to choose the SSL WildCard certificate?
The SSL WildCard certificate is most useful when there are many subdomains that need protection and you want a single certificate solution to manage all these subdomains.
SAN SSL Certificate
The SSL SAN or UCC certificate is used to protect multiple domains and subdomains with a single certificate. A SAN supports FQDN (fully qualified domain name) and has the ability to protect many domains in one certificate.
A website owner can protect different domains such as:
- www.certisur.com
- certisur.org
- blog.certisur.com
- www.certisur.com.ar
- sub2.sub1.certisur.com
An SSL SAN certificate is capable of protecting subdomains with different main domains; on the other hand, the WildCard protects the subdomains of the same main domain.
When you need to protect internal and external domains like sip.mysite.net and sip.mysite.com, an SSL SAN certificate can protect both, whereas in the case of wanting a WildCard, you must purchase two certificates because both domains are different.
When to choose an SSL SAN certificate (MultiDomain)?
If you want to protect multiple different domains as well as their subdomains, an SSL SAN certificate is the ideal option.
Difference between WildCard SSL Certificate and SAN
Remember:
- WildCard Certificate protects multiple subdomains of the same Primary Domain.
- SAN Certificate (MultiDomain) allows you to include several Different Domains and their subdomains in a single SSL Certificate