3 ms·

Isn't it technically valid to issue a cert with (star).domain.com, (star).(star).domain.com, (star).(star).(star).domain.com, etc...?

• judge2020 8y ago
  You can technically create them, but IIRC browsers don't trust them.
  • oasisbob 8y ago
    And creating/signing them is a violation of the CAB Forum Baseline requirements.
• koolba 8y ago
  No you can only have a single wildcard per domain listed in a cert.
  • deathanatos 8y ago
    And only as the leftmost component, that is, (star).example.com is valid, foo.(star).example.com is not.