Can i use a Wildcard certificate to secure an Azure website?

Question

Can I use a wildcard certificate ( *.bakertilly.global) to SSL protect a subdomain for a URL ( http://independence-test.bakertilly.global ) or must i use an explicit certificate that matches the URL of the website in Azure?

Answer 1

I am assuming the service you are talking about is the Azure App Service as you have tagged your post with webapps. Wildcard certificates are supported here but you have to purchase/bring your own certificate, the free managed certificate for this service is not a wildcard certificate.

https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Cportal#start-certificate-order

Answer 2

Yes you can. We do. From a security standpoint you should have a single cert per domain. This prevents a malicious user from creating a subdomain and using your cert but given that subdomains shouldn't be hostable without proper checking this ideally shouldn't be an issue. However if you have a lot of sites then this can be expensive and hence the wildcard might be a more cost effective approach.