Skip to content

Wildcard vs SAN certificates

A wildcard covers one label. A SAN list names each hostname. Customer-owned SaaS names usually want per-hostname certificates.

Answer first

A wildcard covers one label. A SAN list names each hostname. Customer-owned SaaS names usually want per-hostname certificates.

Tradeoffs

Pick the control you need: validation depth, wildcard support, key custody, or operational tempo. Encryption strength is not the differentiator in these comparisons.

What this platform does

One request shape for inventory, orders, webhooks and optional deploy targets. Multi-CA is an explicit provider field — not automatic failover after a challenge is published.

What we will not claim

No official partnership. No “winner.” No encryption-strength ranking. Commercial CA prices come from your contract with that CA. Sources: CA documentation and CA/Browser Forum Baseline Requirements.

Related reading

Academy stays evergreen. Insights covers dated schedule changes. Docs describe the API you actually call.