Wildcard SSL certificates secure a domain and all its subdomains with a single certificate. This is useful for customers with many subdomains (e.g., `*.customerdomain.com`).

### Issuing a Wildcard Certificate

1. Log in to **Plesk**.
2. Go to **Domains** → click the customer domain.
3. Go to **SSL/TLS Certificates**.
4. Click **Install a free basic certificate provided by Let's Encrypt**.
5. Select **Issue wildcard certificate**.
6. Click **Get it free**.
7. Plesk will automatically add the required DNS TXT record for validation.

### Important Notes

- Wildcard certificates only work with DNS validation (not HTTP validation).
- The customer DNS must be managed by Plesk for automatic validation. If DNS is external, the customer must add the TXT record manually.

### Troubleshooting

**Wildcard issuance fails:**

- The DNS TXT record for validation may not have propagated. Wait and retry.
- If DNS is managed externally, add the required TXT record at the DNS provider.

### Related Guides

- [Provision certificates](/hc/help/en/articles/how-to-provision-ssl-certificates-for-plesk-customer-domains)
- [Check status](/hc/help/en/articles/how-to-check-ssl-status-across-plesk-domains)
- [Generate a CSR](/hc/help/en/articles/how-to-generate-a-csr-certificate-signing-request-in-plesk)