Wildcard third level

[ivankisic]

Hi,

Will Let’s Encrypt issue third level wildcard certs? For example *.two.example.com?

[cpu]

Hi @ivankisic,

@ivankisic

Will Let’s Encrypt issue third level wildcard certs? For example *.two.example.com?

Yes. Let's Encrypt will issue a certificate with a name like this.

[rg305]

An “asterisk” as I have been explained:
An asterisk does equal ANY (but not ALL)
That is, it will match all letters, numbers and even dashes and underscores.
But it will not match a period, so it can’t crossover onto lower subdomains.

So…
*.domain.com
won’t cover:
*.1.domain.dom
*.2.domain.com
*.3.domain.com

But YES you can get certs for those wildcards:
*.1.domain.dom
*.2.domain.com
*.3.domain.com
And you can even put them all on one cert.
But as before…
*.1.domain.dom
Won’t cover:
*.a.1.domain.dom
*.b.1.domain.dom
*.c.1.domain.dom
…
(rinse and repeat - up to 100 names on a single cert)