3 ms·
So they could just register *.com.othercompany.com.
by colinbartlett 11y ago
So they could just register *.com.othercompany.com.
- ceejayoz 11y agoI'd say the EV provider should reject such a wildcard. CertSimple argues (https://certsimple.com/blog/wildcard-ev-certificate https://certsimple.com/blog/wildcard-ev-certificate) the EV restriction on wildcards is to prevent google.com.fraud.ru from getting an EV certificate. The single-level wildcard restriction already prevents that.
- nailer 11y agoEV requirements reject all wildcards: the EV applicant must specifically list all domain names. Re: your edit: as the other poster notes, the DV cert would have to be for '*.com.fraud.ph'. That's entirely possible though.