Hacker News Reader

Comment by flyt | Hacker News Reader

All wildcard SSL certs only support one level of subdomain.

You can use a SAN cert to create a multi-level wildcard cert. The cert would be issued for:

    example.com, *.example.com, *.*.example.com, *.*.*.example.com [...]

That's technically possible, but you'll have a very hard time finding a CA that's willing to issue a crazy cert like that.

It's easy to do once you have a good relationship with your CA.

You can also self-sign for internal machines, and leave your public ones one wildcard deep.

It's most likely internal, you run your own org ca.