When I open https://amazon.com in Firefox, I get an "Untrusted Connection" message because the SSL certificate presented by amazon.com is only valid for www.amazon.com. Why don't I get the same message when I open google.com using SSL?
As I understand the output of
openssl s_client -connect google.com:443 | openssl x509 -noout -text
the certificate presented by google.com uses www.google.com as the common name, and doesn't include any subject alternative names or wildcards. What am I missing here?