# Another question about domain certificates

**URL:** <https://community.ciphermail.com/t/another-question-about-domain-certificates/251>\
**Category:** Gateway\
**Created:** [November 8, 2011, 9:10pm UTC](https://community.ciphermail.com/t/another-question-about-domain-certificates/251 "2011-11-08T21:10:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stefan\_Gunther](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@Stefan\_Gunther](https://community.ciphermail.com/u/Stefan_Gunther)\
**Post date:** [November 8, 2011, 9:10pm UTC](https://community.ciphermail.com/t/another-question-about-domain-certificates/251/1 "2011-11-08T21:10:12Z")

</div>

Good evening

after my last posting about domain certificates, I decided to test this feature.

Djigzo accepted the email address \*@abc.com and I was able to configure this "user".

When I now download the certificate for \*@abc.com and import it on another Djigzo system, will this system really use this certificate for every email to addresses that end on abc.com??

And if it does, where do I get an official wildcard certificate? I have checked the website of Verisign and Thawte, but couldn't find an offer for wildcard email certificates, only for single email addresses.

Best regards,

Stefan

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [November 8, 2011, 9:19pm UTC](https://community.ciphermail.com/t/another-question-about-domain-certificates/251/2 "2011-11-08T21:19:21Z")

</div>

Even though it will accept a certificate with a wildcard email address,  
Djigzo will not automatically use it for the domain. There is afaik no  
official standard for wildcard email certificates. If you want to  
encrypt all email sent to a specific domain, you need to add a domain  
and select that certificate as an encryption certificate for that  
domain. This works for any kind of certificate, wildcard or no wildcard  
certificate. The administrator need to decide whether a certificate is  
valid for a domain or not.

Kind regards,

Martijn Brinkers

> **···**
>
> On 11/08/2011 10:10 PM, Stefan Michael Guenther wrote:
> 
> > after my last posting about domain certificates, I decided to test this feature.
> > 
> > Djigzo accepted the email address \*@abc.com and I was able to configure this "user".
> > 
> > When I now download the certificate for \*@abc.com and import it on another Djigzo system, will this system really use this certificate for every email to addresses that end on abc.com??
> > 
> > And if it does, where do I get an official wildcard certificate? I have checked the website of Verisign and Thawte, but couldn't find an offer for wildcard email certificates, only for single email addresses.
> 
> --  
> Djigzo open source email encryption