I need one self signed certificate to cover multiple URLs, which could be represented by the following:
*.foo.com
*.faa.fii.bar.com
Using alternate names I managed to create such a certificate, but I get a certificate error from the browser when accessing
bla.foo.com
I created another certificate for ****.faa.fii.bar.com***, without ****.foo.com***. This time I gave alternate names for several other sites, but all belonging to bar.com.
So the common name was
*.faa.fii.bar.com
and alternate names were:
*.fii.bar.com
*.bar.com
*.fee.bar.com
This worked fine for any url which matches these patterns, so a.fii.bar.com
or a.bar.com
worked with the certificate. But if I add *.foo.com
, which looks just like *.bar.com
, then urls such as a.foo.com
are not accepted, while a.bar.com
is accepted.
How is this limitation defined?