Buying Guide
Hosting for Wildcard SSL — what actually settles it
Written for operators of subdomain-heavy architectures: app.example, store.example, clients.example and dozens more — the checks worth running, the trap worth avoiding, and the recommendation we would give a friend.
The short answer
If one line is all you read, make it this: free SSL covering each subdomain automatically for most setups, and a paid wildcard once subdomains start appearing with no human involved, since both routes are available and we will say which fits.
The working sits below: the checks, the reasoning and the trap — written for operators of subdomain-heavy architectures: app.example, store.example, clients.example and dozens more, without the affiliate league-table theatre this topic usually attracts.
By the Hosting & Domains team · Reviewed 18 August 2026
Free
Site migration in
24/7
Human answers
Daily
Backup cadence
$0
Setup fees
Most writing on this subject is a league table funded by referral fees. We do it differently: name the buyer (operators of subdomain-heavy architectures: app.example, store.example, clients.example and dozens more), name the checks, name the trap, and make a recommendation we will defend in the open.
Begin from one fact about this market and the rest falls in behind it: one wildcard certificate secures *.yourdomain at a single level of depth. Every first-level subdomain you create falls under it automatically, while anything nested deeper needs a certificate of its own.
The checks that settle it
Put every contender through these, top to bottom:
Wildcard certificates handled cleanly by whichever route you take, free or paid.
The comparison against per-subdomain certificates worked at the subdomain count you really run.
The free route genuinely automated, and the paid one easy enough to install once and then ignore.
Multi-level requirements spotted early, because a wildcard covers exactly one level and nothing below it.
The trap most first buyers walk into
Issuing certificates by hand one subdomain at a time on a platform that creates subdomains programmatically, which is automation debt with a hard expiry date.
Once it has been named you see it everywhere in this market — and steering around it does more for you than optimising any other figure on the page.
The verdict, unhedged
Free SSL covering each subdomain automatically for most setups, and a paid wildcard once subdomains start appearing with no human involved, since both routes are available and we will say which fits.
In concrete terms that is our Wildcard SSL option: one flat rate carrying the essentials (SSL, migration, copies, mail) this market prefers to bill separately, with in-place upgrades ready when the work picks up.
Support means a person at any hour, and the remit covers the awkward practical questions other hosts hand straight back.
Ten minutes of checking, well spent
A host worth your money survives scrutiny: check the renewal figure is published up front rather than tucked into a footnote, put a real question to support at an inconvenient hour and judge the reply, read the refund policy for carve-outs, and look up the company registration — a legitimate business leaves a paper trail.
The refund window covers the rest — bring a live site over (the free migration makes that easy), run it for two real weeks, and let ordinary use answer what no sales page can.
No paid placements, no referral fees
Most 'best hosting' writing is ranking for hire. Our motive is simpler and stated plainly: we recommend the setup we would sell you either way — which leaves the rest of the page free to be useful.
A copy is taken daily on every plan, and putting a file or a database back is one click in the panel rather than a support ticket.
- Checks you can run again yourself
- Renewal rates published, not footnoted
- A free migration makes the trial easy
- Refund terms with no small print
Why Hosting & Domains
Standard on every plan
An upgrade path that is real
Shared, VPS and dedicated on one platform — today's choice never boxes tomorrow in.
NVMe and LiteSpeed as standard
The hardware other hosts keep behind premium tiers is simply the baseline build here.
Written out of real conversations
Every check here traces back to real exchanges with operators of subdomain-heavy architectures: app.example, store.example, clients.example and dozens more, not to a features spreadsheet.
One rate, published in the open
What you order at is what you renew at — the only comparison that counts is one we win by default.
The essentials inside, not added on
SSL, the migration, backups and mail come with every plan rather than appearing as checkout extras.
The verdict, turned into an order
The Wildcard SSL plan is this page's conclusion in product form — one rate, essentials inside, upgradeable in place.
Quick Start
Order placed to site online
- 1
Write the job down in one sentence
Write the workload and the audience in one line — for operators of subdomain-heavy architectures: app.example, store.example, clients.example and dozens more, that line alone usually removes half the candidate plans.
- 2
Compare on what year two costs
Introductory rates are the oldest device in this market; rank hosts by the second year instead and the order rearranges itself at once.
- 3
Run a real trial inside the refund window
Putting your own site on the platform answers what no review can, and free migration plus the refund terms take the risk out of trying.
Built In
Fitted to every plan
- Free SSL on every plan, reissued before the old one lapses
- SSH, Git and Composer on the developer plans
- 99.9% uptime as the target, watched around the clock
- A daily copy, with restores you run yourself from the panel
- LiteSpeed caching in the server itself rather than bolted on by plugin
- DDoS filtering absorbed at the network edge
- NVMe SSD storage on every tier, not only the dear ones
- A renewal figure identical to the one you registered at
- Money back within 30 days on hosting plans, 7 on reseller
- Your existing site brought across by our engineers, at no charge
Frequently Asked
The questions that come up most
At what point does a paid wildcard beat free per-subdomain certificates?
As soon as subdomains start appearing programmatically, in client portals or per-tenant applications, or arrive in batches. One certificate already covers whatever spins up, the moment it spins up. For a fixed handful of subdomains, the free automation copes perfectly.
Does a wildcard secure the root domain as well?
As a rule it does, being issued for yourdomain.com and *.yourdomain.com at the same time. It is worth confirming at checkout wherever you buy one, and ours are always set up that way.
What happens when I outgrow the plan?
You upgrade in place. Plan changes are made from the client area with no migration and no downtime, and the range runs from small shared accounts through VPS to full dedicated machines. Growth becomes a setting on the account rather than a search for a new host.
Will you move my existing site free of charge?
Yes. Open a ticket with the login for your current host and we bring the lot across — files, databases, mailboxes, configuration. You check the copy before DNS moves, and the old site keeps taking traffic right up to the moment the new one serves it, so nobody meets a gap.
Keep reading
Hosting With a Free Domain
A buying brief without spin, written for first-time buyers adding up domain and hosting costs before committing to either.
Cheap Dedicated Servers
A buying brief without spin, written for buyers who want bare-metal control at end-of-line prices.
Wildcard SSL (Glossary)
The plain-English definition this page rests on, with a worked example.
SSL Certificates
Free SSL on every plan, with wildcard and EV there when more is needed.
Web Hosting
cPanel hosting on NVMe drives — SSL, the migration and year one of the name all included.
Changing hosts? Run through our checklist first.
A plain order of work for a move nobody visiting will notice: which files go over first, how to carry the mail across without losing a message, when exactly to repoint DNS, and the two mistakes behind nearly every outage we are asked to rescue.
Register it, then build on it.
From a first website to a rack of machines, moving up is a change to the account rather than a migration.
View SSL Certificates plans