App Service Certificate Wildcard and Root Domain

Question

Hi,

I'm looking to purchase a wildcard Azure App Service Certificate. Do these certificates come with both the wildcard subdomain and a SAN for the root/apex domain? For example, *.contoso.com and contoso.com.

Many third-party wildcard certificates come with both, but I can't find any documentation for the App Service Certificate specifically that clarifies this point.

Thank you!

Note: I'm not asking about the naked domain option in the standard cert (www.contoso.com and contoso.com), which has been provided as an answer in some other similar queries, I am specifically referring to the wildcard.

Answer 1

Hello @Chris Vella

Yes, the Azure App Service Certificate for a wildcard does include both the subdomain wildcard (e.g., *.contoso.com) and the root (e.g., contoso.com) as a Subject Alternative Name (SAN)

This means that when you purchase a wildcard certificate, it will secure both your root domain and any subdomains.

Also check the following tutorial here, that might help. you.

https://learn.microsoft.com/en-us/samples/azure/azure-quickstart-templates/app-service-certificate-wildcard/

If this answers your question and solves your issues, tagging this info as answered is appreciated, and is helpful for community readers who may have similar questions.

Answer 2

I ended up just purchasing the wildcard App Service Certificate. It does include both the subdomain wildcard (*.test.domain.com) and the root (test.domain.com) as a SAN. Hope that helps someone in future.

Answer 3

Thank you for sharing the answer with the community. Feel free to come back any time and we would be happy to assist you.