Double Wildcard SSL Certificates

Solution 1:

Actually, wildcards only work on the first level of a subdomain in most browsers. So a wildcard certificate for *.example.com wouldn't work on mail.test1.example.com.

Web browsers also don't know what to do with a certificate for somthing.*.example.com either. You best option is to get a SAN certificate that you can include the specific hostnames in no matter what level they are on.

Solution 2:

In case it helps anyone, double wildcard certs don't actually work.

(from firefox) www.test.example.com uses an invalid security certificate.

The certificate is only valid for *.*.example.com

(Error code: ssl_error_bad_cert_domain)