Hacker News Reader

Extended validation certificates[1] (the fancy ones with the green URL bar) aren't allowed to contain wildcard entries.

1: http://en.wikipedia.org/wiki/Extended_Validation_Certificate

Then don't use EV? EV certs are generally pretty dubious, but I imagine the distinction between self-signed or no cert vs non-EV valid cert is pretty big.

Browser makers are starting to really de-emphasize domain validated certs in favor of EV. In many cases now, non EV certs don't trigger anything to be green in the browser address bar:

Screenshots: https://www.expeditedssl.com/pages/visual-security-browser-s...

Reply on news.ycombinator.com