[{"data":1,"prerenderedAt":337},["ShallowReactive",2],{"docs-wildcard":3,"docs-nav":295},{"id":4,"title":5,"body":6,"category":282,"dateModified":283,"datePublished":283,"description":129,"draft":284,"extension":285,"icon":286,"meta":287,"navigation":288,"order":269,"path":289,"seo":290,"sitemap":291,"stem":292,"summary":293,"__hash__":294},"docs\u002Fdocs\u002Fwildcard.md","通配符证书申请",{"type":7,"value":8,"toc":267},"minimark",[9,13,27,42,46,53,65,73,76,108,111,120,130,135,139,196,199,202,207,214,218,232,236,252,256],[10,11,12],"h2",{"id":12},"通配符证书能做什么",[14,15,16,17,21,22,26],"p",{},"通配符证书（",[18,19,20],"code",{},"*.example.com","）可以保护一个域名下的",[23,24,25],"strong",{},"所有一级子域名","：www、api、mail、blog 等，以及未来新增的任意子域名，无需为每个子域名单独申请。",[14,28,29,30,33,34,37,38,41],{},"注意：",[18,31,32],{},"*"," 只匹配一级子域名，不能保护 ",[18,35,36],{},"a.b.example.com","（多级），也不保护根域名 ",[18,39,40],{},"example.com"," 本身。",[10,43,45],{"id":44},"只能使用-dns-验证","只能使用 DNS 验证",[14,47,48,49,52],{},"根据 ACME v2 协议规范，通配符证书",[23,50,51],{},"只能通过 DNS-01 验证方式","申请，不支持 HTTP 验证。因此申请前请确保拥有域名的 DNS 管理权限。",[54,55,56],"blockquote",{},[14,57,58,59,64],{},"配置",[60,61,63],"a",{"href":62},"\u002Fdocs\u002Fcloud-credential","云平台凭证","后，DNS 验证记录可全自动添加，无需手动操作。",[14,66,67,68,72],{},"DNS 验证操作详见 ",[60,69,71],{"href":70},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解","。",[10,74,75],{"id":75},"申请流程",[77,78,79,83,89,92,95,102,105],"ol",{},[80,81,82],"li",{},"在申请表单中选择「域名证书」类型",[80,84,85,86,88],{},"域名输入框填写通配符格式 ",[18,87,20],{},"，系统自动识别为通配符证书",[80,90,91],{},"验证方式自动锁定为 DNS 验证（不可切换）",[80,93,94],{},"选择证书颁发机构（Let's Encrypt \u002F Google Trust Services \u002F ZeroSSL 均支持）",[80,96,97,98,101],{},"提交申请后，按提示添加 ",[18,99,100],{},"_acme-challenge"," TXT 记录",[80,103,104],{},"等待 DNS 生效后点击「验证」",[80,106,107],{},"验证通过后证书自动签发，下载并部署",[10,109,110],{"id":110},"同时保护根域名",[14,112,113,114,116,117,119],{},"若希望一张证书同时保护 ",[18,115,40],{}," 和 ",[18,118,20],{},"，申请时把两者都填上（每行一个），平台会签发一张包含两者的多域名通配符证书。",[121,122,127],"pre",{"className":123,"code":125,"language":126},[124],"language-text","example.com\n*.example.com\n","text",[18,128,125],{"__ignoreMap":129},"",[54,131,132],{},[14,133,134],{},"系统检测到通配符不含主域名时，会在申请摘要区提示「建议补充 example.com」，点击即可一键添加。",[10,136,138],{"id":137},"ca-支持情况","CA 支持情况",[140,141,142,155],"table",{},[143,144,145],"thead",{},[146,147,148,152],"tr",{},[149,150,151],"th",{},"CA",[149,153,154],{},"通配符支持",[156,157,158,167,174,181,189],"tbody",{},[146,159,160,164],{},[161,162,163],"td",{},"Let's Encrypt",[161,165,166],{},"✅",[146,168,169,172],{},[161,170,171],{},"Google Trust Services",[161,173,166],{},[146,175,176,179],{},[161,177,178],{},"ZeroSSL",[161,180,166],{},[146,182,183,186],{},[161,184,185],{},"SSL.com",[161,187,188],{},"❌ 仅单域名",[146,190,191,194],{},[161,192,193],{},"Actalis",[161,195,188],{},[14,197,198],{},"选择 SSL.com 或 Actalis 时，系统会在摘要区显示红色提示并阻止提交。",[10,200,201],{"id":201},"常见问题",[203,204,206],"h3",{"id":205},"通配符证书支持-ip-地址吗","通配符证书支持 IP 地址吗？",[14,208,209,210,72],{},"不支持。IP 地址需申请单独的 ",[60,211,213],{"href":212},"\u002Fdocs\u002Fip-certificate","IP 地址证书",[203,215,217],{"id":216},"一张通配符证书能保护多个不同主域名吗","一张通配符证书能保护多个不同主域名吗？",[14,219,220,221,223,224,227,228,231],{},"不能。",[18,222,20],{}," 只保护该主域名的子域名，其他主域名需另行申请。如需保护多个主域名的子域，需申请多域名通配符证书（如 ",[18,225,226],{},"*.a.com"," + ",[18,229,230],{},"*.b.com","）。",[203,233,235],{"id":234},"通配符证书能保护多级子域名吗","通配符证书能保护多级子域名吗？",[14,237,220,238,240,241,244,245,248,249,251],{},[18,239,20],{}," 只保护一级子域名（如 ",[18,242,243],{},"www.example.com","、",[18,246,247],{},"api.example.com","），不保护 ",[18,250,36],{}," 这样的多级子域。如需保护多级子域，需单独申请对应域名的证书。",[203,253,255],{"id":254},"通配符证书续签时还需要重新验证吗","通配符证书续签时还需要重新验证吗？",[14,257,258,259,261,262,266],{},"需要。每次续签都需要重新完成 DNS 验证。配置",[60,260,63],{"href":62},"并开启",[60,263,265],{"href":264},"\u002Fdocs\u002Fauto-renew","自动续签","后，验证和续签全程自动完成，无需手动干预。",{"title":129,"searchDepth":268,"depth":269,"links":270},2,3,[271,272,273,274,275,276],{"id":12,"depth":268,"text":12},{"id":44,"depth":268,"text":45},{"id":75,"depth":268,"text":75},{"id":110,"depth":268,"text":110},{"id":137,"depth":268,"text":138},{"id":201,"depth":268,"text":201,"children":277},[278,279,280,281],{"id":205,"depth":269,"text":206},{"id":216,"depth":269,"text":217},{"id":234,"depth":269,"text":235},{"id":254,"depth":269,"text":255},"申请与验证","2026-09-09",false,"md",null,{},true,"\u002Fdocs\u002Fwildcard",{"title":5,"description":129},{"loc":289},"docs\u002Fwildcard","通配符证书如何保护所有子域名？申请流程、只能用 DNS 验证的原因，以及根域名保护的注意事项。","YbpsC8gcHJlKwDt1o8DrIvUQtAY2H6v97zIDluqaT4k",[296,300,304,308,311,314,317,320,323,327,328,331,334,336],{"path":264,"title":297,"category":298,"order":299},"SSL证书自动续签配置","部署与续签",5,{"path":301,"title":302,"category":298,"order":303},"\u002Fdocs\u002Fcert-download","证书下载与格式说明",1,{"path":305,"title":306,"category":307,"order":269},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":62,"title":309,"category":298,"order":310},"云平台凭证配置指南",6,{"path":312,"title":313,"category":307,"order":268},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":315,"title":316,"category":282,"order":299},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传",{"path":318,"title":319,"category":298,"order":269},"\u002Fdocs\u002Fdeploy-cloud","一键部署到阿里云 CDN\u002FESA",{"path":321,"title":322,"category":298,"order":268},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":324,"title":325,"category":298,"order":326},"\u002Fdocs\u002Fdeploy-server","服务器部署客户端安装与使用",4,{"path":70,"title":71,"category":282,"order":303},{"path":329,"title":330,"category":307,"order":303},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":332,"title":333,"category":282,"order":268},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",{"path":212,"title":335,"category":282,"order":326},"IP 地址证书申请指南",{"path":289,"title":5,"category":282,"order":269},1789011271295]