Get free wildcard SSL certificates for your domain with Personal Wildcard Certificate — a Let's Encrypt ACME client that runs entirely on your Windows PC. Issue a real, browser-trusted certificate covering every subdomain of your domain (*.yourdomain.com) in minutes. No cloud services, no subscriptions, no per-certificate fees — ever. ONE CERTIFICATE, EVERY SUBDOMAIN A wildcard certificate secures unlimited subdomains with a single file: app.yourdomain.com, nas.yourdomain.com, dev.yourdomain.com — all covered. It is the foundation of every serious home lab and self-hosted setup. Commercial wildcard certificates cost hundreds per year. Let's Encrypt issues them for free — but the ACME protocol and DNS-01 validation are fiddly to do by hand. Personal Wildcard Certificate walks you through the whole flow in a clean, guided wizard. HOW IT WORKS 1. Enter your domain and email — the app registers an ACME account with Let's Encrypt automatically. 2. The app requests a wildcard order and shows you the exact DNS TXT record to create. 3. Add the TXT record at your DNS provider (any registrar works — Cloudflare, Namecheap, GoDaddy, anyone). 4. The app verifies propagation, completes the DNS-01 challenge, and downloads your certificate. 5. You get standard PEM files — full chain certificate and private key — ready for any web server, proxy, NAS, or app. KEY CAPABILITIES ★ Real Wildcard Certificates — *.yourdomain.com plus the bare domain in one certificate, trusted by every browser and device. ★ Guided DNS-01 Wizard — Step-by-step flow with the exact TXT record name and value to copy. Built-in propagation checker tells you when the record is live. ★ Any DNS Provider — Manual TXT validation means no API keys, no provider lock-in. Works with every registrar on earth. ★ Standard PEM Output — Full-chain certificate and private key in the universal format. Drop into nginx, Caddy, Apache, IIS, Synology, Home Assistant, or any reverse proxy. ★ Account Management — ACME account keys are created and stored locally. Staging environment support for safe testing before real issuance. ★ Renewal Ready — Certificates last 90 days. Re-run the wizard to renew — the app remembers your domain and account. ★ Native C Engine — The complete ACME v2 protocol implemented in a tiny native library. Fast, lightweight, zero external dependencies. ★ Completely Private — Your private keys are generated and stored only on your PC. Nothing is uploaded anywhere except the certificate request to Let's Encrypt itself. PERFECT FOR • Home lab users securing NAS, dashboards, and self-hosted services with real HTTPS • Developers who need trusted certificates for local and staging environments • Anyone pairing with a local reverse proxy to give every service its own HTTPS subdomain • Small businesses replacing expensive commercial wildcard certificates • Privacy-focused users who want their private keys to never leave their machine MODERN WINDOWS EXPERIENCE Built with WinUI 3, Personal Wildcard Certificate features a clean step-by-step wizard, live status updates during validation, dark and light theme support, and clear guidance at every stage. No OpenSSL command lines, no config files, no guesswork. Get Personal Wildcard Certificate today — and never pay for an SSL certificate again. Your domain, your keys, your certificate.