Re: Wildcard certificates.

[Bradley Stone <bvstone@xxxxxxxxx>]

> From what I've read the * can only replace one subdomain level.  Not
necessarily a different domain, just multiple levels.

https://www.godaddy.com/community/SSL-And-Security/Multi-level-subdomains-on-wildcard-ssl-certificate/td-p/15992


Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #16 <https://www.bvstools.com/mailtool.html>: No external
"helper" PC system required. 100% IBM i native!

On Wed, Dec 13, 2017 at 8:48 AM, Rob Berendt <rob@xxxxxxxxx> wrote:

> Suppose your external addresses are something like
>     myserver.mycorp.com
> and your internal addresses are something like
>     myserver.corp.mycorp.com
> Then is a wildcard certificate for *.mycorp.com would work for
> myserver.mycorp.com but not myserver.corp.mycorp.com, right?
>
> The reason I am asking is that I have this ticket open with IBM regarding
> putting a valid cert on my HMC and their reply is:
> <snip>
> After reviewing the logs again, I noticed that the certificate you have
> installed is for *.dekko.com, but you are hitting the HMC using
> "https://hmc02.corp.dekko.com"; which is a different domain and likely
> what is causing the browser to complain.
> </snip>
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1
> Group Dekko
> Dept 1600
> Mail to:  2505 Dekko Drive
>           Garrett, IN 46738
> Ship to:  Dock 108
>           6928N 400E
>           Kendallville, IN 46755
> http://www.dekko.com
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: http://amzn.to/2dEadiD