Modern TLS libraries also shouldn't accept a wildcard TLD nor wildcards that are anywhere but the left most lower-level domain (eg *.example.com). My point bei

Modern TLS libraries also shouldn't accept a wildcard TLD nor wildcards that are anywhere but the left most lower-level domain (eg *.example.com). My point being the Common Name missing from the Subject Alt Names is the least of the problems with this certificate.