I need one self signed certificate to cover multiple URLs, which could be represented by the following:
Using alternate names I managed to create such a certificate, but I get a certificate error from the browser when accessing
I created another certificate for *.faa.fii.bar.com, without *.foo.com. This time I gave alternate names for several other sites, but all belonging to bar.com.
So the common name was
and alternate names were:
*.fii.bar.com *.bar.com *.fee.bar.com
This worked fine for any url which matches these patterns, so
a.bar.com worked with the certificate. But if I add
*.foo.com, which looks just like
*.bar.com, then urls such as
a.foo.com are not accepted, while
a.bar.com is accepted.
How is this limitation defined?