4 ms·
Wildcard certificates are only valid for the subdomain level directly under it. [1] If I get a wildcard certificate for example.com (the common name is set to *
by hwatson 13y ago
Wildcard certificates are only valid for the subdomain level directly under it. [1]
If I get a wildcard certificate for example.com (the common name is set to *.example.com), foo.bar.example.com will throw an error.
[1] https://en.wikipedia.org/wiki/Wildcard_certificate#Limitation https://en.wikipedia.org/wiki/Wildcard_certificate#Limitatio...
- duskwuff 13y agoThe specification isn't particularly clear, but it seems to me that RFC 2818 section 3.1 [1] could permit some dangerously broad wildcards like ".com", "www..com", or even ".". Combined with subject alternate names, it may be possible to create a certificate that's valid for almost anything. [1]: http://tools.ietf.org/html/rfc2818#section-3.1 http://tools.ietf.org/html/rfc2818#section-3.1
- jasomill 13y agoIIRC, top-level and "match all" wildcard certificates were originally permitted by design (e.g., for intranet and proxy applications), but most modern browsers block them for security reasons.