Issue Free Let's Encrypt Wildcard SSL on DirectAdmin Covering All Subdomains

A Wildcard SSL certificate is an excellent solution for website administrators managing multiple subdomains. Unlike issuing separate SSL certificates for each subdomain (api.yourdomain.com, blog.yourdomain.com, mail.yourdomain.com, etc.), a single Wildcard certificate covers *.yourdomain.com and yourdomain.com all at once. On DirectAdmin hosting with AsiaGB, you can request a free Let's Encrypt Wildcard SSL certificate directly from the control panel without SSH access or complex command-line tools. Simply add a DNS TXT record to prove domain ownership, and you're done.

What is Wildcard SSL and Why You Need It

A Wildcard SSL certificate is an SSL/TLS certificate that protects a primary domain and all its first-level subdomains with a single certificate. The naming convention is *.yourdomain.com, where the asterisk (*) acts as a wildcard matching any subdomain name.

For example, if your website is at yourdomain.com and you have multiple subdomains such as:

• api.yourdomain.com
• blog.yourdomain.com
• shop.yourdomain.com
• mail.yourdomain.com
• assets.yourdomain.com

A single Wildcard certificate covers all five subdomains. You don't need to issue five separate certificates—one Wildcard certificate handles everything.

Why Use a Wildcard SSL Certificate:

• Cost-effective: Although Let's Encrypt is free, managing multiple certificates becomes complex.
• Simplified management: Administer one certificate instead of multiple.
• Professional appearance: Wildcard certificates convey technical maturity and proper infrastructure planning.
• Future-proof: When you add new subdomains, they are automatically covered without reissuing.

Why Wildcard Certs Require DNS-01 Challenge

Standard SSL certificates (such as yourdomain.com only) can use HTTP-01 challenge. Let's Encrypt verifies an HTTP file placed in the .well-known/acme-challenge directory to confirm domain ownership.

Wildcard certificates, however, must use DNS-01 challenge for the following reasons:

• HTTP validation impossible for wildcards: Because a Wildcard certificate covers all subdomains (including those without web servers), Let's Encrypt cannot use HTTP-01.
• DNS is the only method: DNS-01 requires you to add a TXT record that the system provides to your DNS provider, proving domain ownership through DNS access.

Benefits of DNS-01 validation:

• Works with Wildcard certificates
• Works with subdomains without HTTP (e.g., SMTP, DNS-only subdomains)
• More flexible than HTTP-01 for complex infrastructure

Prerequisites

Before requesting a Wildcard SSL certificate on DirectAdmin, ensure you have:

• DirectAdmin account: Hosting with AsiaGB (Shared or VPS) that includes DirectAdmin access.
• DNS management access: You must be able to modify DNS records for your domain. If your domain uses AsiaGB's DNS server, the DNS management interface is directly in DirectAdmin.
• Internet connectivity: The server must reach Let's Encrypt's API (automatic, no action needed).
• Domain ready: Decide which domain you want to protect with Wildcard (e.g., *.yourdomain.com and yourdomain.com).

Step-by-Step Guide to Create Wildcard SSL in DirectAdmin

Follow these steps to request a free Let's Encrypt Wildcard SSL certificate on DirectAdmin:

Step 1: Access DirectAdmin Control Panel

Navigate to your DirectAdmin control panel using the server's hostname or IP address (e.g., hostname:2222) and log in with your user account.

Step 2: Open SSL Certificates

From the main menu, find and click "SSL Certificates" or "Manage SSL Certificates" (naming varies by DirectAdmin theme).

Step 3: Select Your Domain

Choose the domain for which you want to request a Wildcard SSL certificate (e.g., yourdomain.com).

Step 4: Choose Let's Encrypt

Look for a "Request a new SSL Certificate" or "Create SSL" option. Click it and select "Let's Encrypt" as the provider.

Step 5: Enter Wildcard Domain Names

In the domain field(s), enter:

• *.yourdomain.com (for the Wildcard)
• yourdomain.com (for the base domain)

Many DirectAdmin versions provide an "Add SAN" (Subject Alternative Name) button to include both names. Fill both fields.

Step 6: Select DNS-01 Challenge Method

When prompted for the validation method, select:

• DNS-01 (required for Wildcard)

Do not use HTTP-01 as it does not support Wildcard certificates.

Step 7: Perform DNS Validation

The system displays a TXT record you must add to your DNS provider:

Example:

• Name: _acme-challenge.yourdomain.com
• Value: xxxxxxxxxxxxxx (long string provided by the system)

Steps to complete:

1. Go to the DNS Manager in DirectAdmin (or your external DNS provider if not using DirectAdmin DNS).
2. Create a new TXT record with the exact Name and Value shown by the system.
3. Wait for DNS propagation (typically 5–15 minutes).

Step 8: Wait for Validation

Once the TXT record is in place, the system automatically checks for it. When validation succeeds, Let's Encrypt issues the certificate and installs it on your domain.

Step 9: Verify Installation

The SSL Certificates page displays the status as "Valid" or "Installed" with details such as:

• Certificate issuer (Let's Encrypt)
• Issue date
• Expiry date
• Covered domains (*.yourdomain.com, yourdomain.com)

Example output:

Domain: yourdomain.com
Wildcard: *.yourdomain.com
Provider: Let's Encrypt
Status: Active
Issue Date: 2026-07-01
Expiry Date: 2027-07-01

Comparison Table: Single-Domain vs Wildcard SSL

Aspect	Single-Domain SSL (yourdomain.com)	Wildcard SSL (*.yourdomain.com)
Covers primary domain	yourdomain.com only	yourdomain.com + all subdomains
Covers subdomains	No (requires separate certificates)	Yes (all subdomains automatically)
Challenge type	HTTP-01 or DNS-01	DNS-01 only
Number of certificates	1 per subdomain + 1 for primary	1 certificate only
Management complexity	Complex (multiple certificates)	Simple (single certificate)
Adding new subdomain	Issue new certificate	Automatically covered
Cost (Let's Encrypt)	Free	Free
Subdomain infrastructure	Requires running web servers and placing HTTP-01 files on each	Requires DNS access only; no web servers needed

Summary

Requesting a Wildcard Let's Encrypt SSL certificate on DirectAdmin is straightforward and saves significant time managing multiple certificates for subdomains. The key steps are:

1. Log into DirectAdmin
2. Navigate to SSL Certificates
3. Select Let's Encrypt and DNS-01 challenge
4. Enter *.yourdomain.com and yourdomain.com
5. Add the TXT record to your DNS manager
6. Wait for validation and automatic certificate issuance

With a single Wildcard certificate, all current and future subdomains (at the first level) are protected with HTTPS. DirectAdmin simplifies the entire process, making SSL certificate management accessible even for those without technical command-line skills. This approach is ideal for growing websites that plan to add multiple subdomains in the future.

Frequently Asked Questions

Can I request a Wildcard SSL on shared hosting?

Yes. If you use DirectAdmin hosting with AsiaGB, you can request a Wildcard SSL Let's Encrypt certificate directly from the control panel without SSH or root access. The same process works for both shared hosting and VPS with DirectAdmin.

Is Wildcard SSL as secure as single-domain SSL?

Yes. Both use the same encryption strength and validation methods. The only difference is scope: Wildcard covers all first-level subdomains (*.yourdomain.com), while single-domain covers only one domain. Security levels are identical.

If I remove a subdomain, does the Wildcard SSL remain valid?

Yes. The Wildcard certificate covers *.yourdomain.com regardless of which subdomains are active. Removing a subdomain does not affect the certificate's validity or its protection of remaining subdomains.

How do I renew an expired Wildcard SSL certificate?

The process mirrors the initial request. In DirectAdmin's SSL Certificates page, select Renew. The system provides a new TXT record to add to DNS. After adding it and waiting for propagation, the certificate renews automatically once validation is complete.