通配符证书不适用于子域

Question

我创建的通配符证书适用于xxx.domain.com但不适用于aaa.bbb.domain.com

创建证书时：

Common Name (e.g. server FQDN or YOUR name) []:*.domain.com

但似乎还不够。

Answer 1

通配符SSL证书仅匹配一个级别。见

• Problems with SSL and multi level subdomains
• wildcard ssl certificate does not cover www version, how do I fix?
• https://serverfault.com/questions/296390/ssl-domain-problem-for-signed-asterisk-certificates
• https://serverfault.com/questions/645230/why-does-my-wildcard-ssl-certificate-cause-a-domain-mismatch-error-on-a-second-l
• https://serverfault.com/questions/87869/ssl-certificates-for-subdomain-example-com
• https://security.stackexchange.com/questions/83245/ssl-cert-for-sub-domain-com-and-www-sub-domain-com