Wildcard Azure App Service certificate usage for subdomains?

EnterpriseArchitect 5,136 Reputation points
2023-10-06T03:13:12.6833333+00:00

I already have the Wildcard Azure App Service SSL certificate *.mydomain.com using: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-app-service-certificate?tabs=portal

it is now available under the: https://portal.azure.com/#view/HubsExtension/BrowseResource/resourceType/Microsoft.CertificateRegistration%2FcertificateOrders

However, I have now the requirements to secure the application deployed using my subdomains:

*.Portal1.mydomain.com *.Portal2.mydomain.com ... *.PortalX.mydomain.com

Do I need to purchase any additional certificates for the Wildcard Azure App Service SSL certificate *.mydomain.com is already enough?

Any help would be greatly appreciated.

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,407 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. TP 83,971 Reputation points
    2023-10-06T03:22:41.22+00:00

    Hi,

    You will need new wildcard certificates since they only work for one level. For example, *.mydomain.com works for portal1.mydomain.com, portal2.mydomain.com, portal3.mdomain.com hosts, but will not work for host1.portal1.mydomain.com, host2.portal1.mydomain.com since they are at another level deep.

    If you want you can obtain your wildcards for free from Let's Encrypt, but downside is you will need to script the renewals or manually upload them into app service.

    Please click Accept Answer if the above was useful.

    Thanks.

    -TP