Can SSL Wildcards have multiple/nested levels of wildcard?
Posted
by
Don Faulkner
on Pro Webmasters
See other posts from Pro Webmasters
or by Don Faulkner
Published on 2013-03-14T15:49:08Z
Indexed on
2013/10/24
22:10 UTC
Read the original article
Hit count: 210
ssl-certificate
I know that an SSL wildcard certificate (*.example.org
) can be used to support many names under the domain (a.example.org
, b.example.org
, c.example.org
). I also know that the * is only good for matching a single level of name. That is, *.example.org
will not work on a.b.example.org
.
What if I used a certificate with the name ..example.org? I'd like to build a certificate with the following name configuration:
CN=example.org
subjectAltName=DNS:example.org, DNS:*.example.org, DNS:*.*.example.org, DNS:*.*.*.example.org
I've tried building a few like this as self-signed certificates, but I've not had good results. For example, chrome tells me "Server's certificate does not match the URL."
Is it possible to have nested wildcards in a certificate, or do the popular browsers not support this?
© Pro Webmasters or respective owner