通配符证书不适用于子域

Question

我创建了一个通配符证书，适用于xxx.domain.com但不适用于aaa.bbb.domain.com

创建证书时：

Common Name (e.g. server FQDN or YOUR name) []:*.domain.com

但这似乎还不够。

Answer 1

通配符 SSL 证书仅匹配一级。看

• SSL 和多级子域的问题
• 通配符 ssl 证书不涵盖 www 版本，我该如何解决？
• https://serverfault.com/questions/296390/ssl-domain-problem-for-signed-asterisk-certificates
• https://serverfault.com/questions/645230/why-does-my-wildcard-ssl-certificate-cause-a-domain-mismatch-error-on-a-second-l
• https://serverfault.com/questions/87869/ssl-certificates-for-subdomain-example-com
• https://security.stackexchange.com/questions/83245/ssl-cert-for-sub-domain-com-and-www-sub-domain-com
• https://serverfault.com/questions/104160/wildcard-ssl-certificate-for-second-level-subdomain