Thawte Wildcard SSL Certificate is the wildcard of the Thawte business grade line: one domain, unlimited subdomains, higher warranty than SSL 123 Wildcard and the premium Trusted Site Seal. With unlimited server licensing, one certificate covers your whole infrastructure. It is for organisations in Pakistan that run customer facing services on subdomains and want a heritage brand with higher warranty, such as education groups, healthcare networks and outsourcing companies. DV issuance takes minutes.
Everything a buyer or a developer checks before ordering, in one place.
Longer plans cost less per year and lock today's price. Certificates are reissued free every year on multi-year plans (browser rule: maximum 398 days per certificate).
| Term | Total | Per year | Saving |
|---|---|---|---|
| 1 year | Rs 119,587 | Rs 119,587 | Base price |
| 2 years | Rs 227,216 | Rs 113,608 | Save Rs 11,958 (5%) |
| 3 years | Rs 334,841 | Rs 111,614 | Save Rs 23,919 (7%) |
Prices include the SSLWalay margin and are shown as billed. Taxes, if any, appear on the quotation. Pay by bank transfer, JazzCash, EasyPaisa or card.
Have these ready and the certificate is issued without back and forth.
A 2048-bit RSA CSR generated from your hosting panel or server. If you use cPanel, go to SSL/TLS, then Generate CSR. You can also use our free CSR generator tool.
The private key is created together with the CSR and stays on your server. Never email it to anyone, including us.
You must be able to receive an email at admin@ or hostmaster@ your domain, or add a DNS CNAME record, or upload a small file to your website.
The common name in the CSR must start with an asterisk, for example *.yourdomain.pk. Wildcard certificates are validated by DNS or email, not by file upload.
The certificate is issued in the name of a registered company, sole proprietorship or organization. The business name must match official records.
This is a Organization Validation (OV) certificate. The CA verifies that your organization exists. Pakistani records that work:
SECP Certificate of Incorporation, Form 29 or a sole proprietor NTN certificate from FBR. The CA checks that the organization legally exists.
A registered office address in Pakistan that appears in an official record or on your NTN, bank letter or utility bill.
A working business phone number found in a public directory, or a lawyer or accountant attestation letter (we provide the template).
WHOIS record or DNS record showing the domain belongs to your organization. Privacy protected WHOIS can still be verified with a DNS record.
yourdomain.crtYour main certificate. This is the file that carries your domain name and your verified company name.
CA bundle (chain)One or more intermediate certificates from Thawte. They link your certificate to the trusted root. Without the chain, some phones and browsers show a warning.
Private key (.key)Already on your server from the CSR step. The certificate only works with the key that made the CSR.
PFX / P12 (optional)A single bundled file for Windows IIS, Exchange and some load balancers. Make it with our free SSL converter tool.
Installs on:
Browsers trust your certificate because it links to a root they already know. The CA bundle makes that link. Install it with your certificate or phones will show an error.
From order to padlock. We are on WhatsApp for every step.
Choose 1, 2 or 3 years, then pay by bank transfer, JazzCash, EasyPaisa or card. You receive a PKR invoice from the client area.
Paste the CSR in the activation form in the client area. We can generate it for you on WhatsApp if you are not sure how.
Pick email, DNS CNAME or HTTP file. DNS is the easiest if your domain is with DomainWalay.
The CA confirms your company record and phone number. Usually 1 to 3 working days. We track the case for you.
You get the .crt file and the CA bundle by email and in the client area. Install on cPanel, Plesk, Nginx, Apache or IIS. We help on WhatsApp.
Thawte Wildcard SSL Certificate is an SSL certificate for one domain and its first-level subdomains with fast domain validation. It is suitable for customers in Pakistan who want clear pricing and local purchase support. It gives website visitors an encrypted HTTPS connection and helps remove browser security warnings.
Education groups · Healthcare networks · Outsourcing companies with many subdomains
Price, validation, installation and renewal, answered plainly.
Back to priceSame DV validation and Wildcard coverage from other brands, sorted by price.
Khalid Group Wildcard SSL is the cheapest wildcard certificate in Pakistan at Rs 13,514 per year for one domain and unlimited first level subdomains. It is issued on a globally trusted root with 256-bit encryption and domain validation in minutes. Small SaaS companies, hosting resellers and multi branch businesses buying their first wildcard on a tight budget get the same coverage as Sectigo PositiveSSL Wildcard at less than half the price. Activation, installation and renewal are all handled by the Karachi based team in Urdu and English.
If your domain has many subdomains such as shop, mail, app and api, Sectigo PositiveSSL Wildcard secures all of them with one certificate. It covers unlimited first level subdomains plus the main domain. This is cheaper and easier than buying a separate certificate for each subdomain and tracking many renewal dates. Domain validation takes minutes, and when you add a new subdomain later you do not need to reissue the certificate. For SaaS startups, hosting resellers and multi branch businesses in Pakistan, this is the most budget friendly wildcard on the trusted Sectigo root.
Sectigo Essential Wildcard secures one domain and unlimited first level subdomains, with the higher warranty and dynamic site seal of the Essential line. Compared to PositiveSSL Wildcard, it suits businesses that run customer accounts, dashboards or internal tools on their subdomains and want stronger warranty backing. Domain validation takes minutes and new subdomains are covered without a reissue. Software houses and ERP or CRM providers in Pakistan that give each client a separate subdomain find this a practical mid range wildcard.
RapidSSL WildcardSSL is a budget wildcard from the DigiCert family for one domain and unlimited first level subdomains. Domain validation takes minutes with no paperwork, and new subdomains are covered without a reissue. Hosting resellers, small SaaS companies and multi branch businesses in Pakistan that want an affordable wildcard and know the RapidSSL brand should compare it with Sectigo PositiveSSL Wildcard. With unlimited server licensing, one certificate can be installed on many servers.
Order, pay locally and install with our help. No dollar card, no foreign support ticket. Prices locked at checkout.
For this certificate. Your PDF quotation is ready in seconds, price locked for 7 days.