Actually shouldn't they only have the fully qualified domain name in the cert? If I get a cert for example.com nobody expects it to also be valid for example.c

Actually shouldn't they only have the fully qualified domain name in the cert? If I get a cert for example.com nobody expects it to also be valid for example.com.apple.com which means that the dot is implied... The fact that browsers give cert errors for the dotted name seems like a bug to me.