Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two hosts set on apache server with signed ssl certs. Both virtual hosts have correct configuration I believe. First is witch is working correctly and browsers don't complain for its cert. Second domain is and it generating errors, what I get is ssl_error_bad_cert_domain for uses an invalid security certificate.

The certificate is only valid for the following names: * ,

Should the * certificate support more than one level subdomain?

share|improve this question

migrated from Aug 1 '11 at 17:32

This question came from our site for professional and enthusiast programmers.

* should only match for domains, but not or

Citing this great presentation:

RFC 2595 (Using TLS with IMAP, POP3 and ACAP): A “*” wildcard character MAY be used as the left-most name component in the certificate. For example, * would match,, etc. but would not match

RFC 2818 (HTTP Over TLS): Names may contain the wildcard character * which is considered to match any single domain name component or component fragment. E.g., matches but not matches but not

RFC 4513 (LDAP Authentication Methods): The ‘*’ (ASCII 42) wildcard character is allowed in subjectAltName values of type dNSName, and then only as the left-most (least significant) DNS label in that value. This wildcard matches any left-most DNS label in the server name. That is, the subject * matches the server names and, but does not match or

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.