Can the common name for a wild-carded SSL certificate be more specific than simply "*"?
e.g.: in the case of a firewall with multiple interfaces and similar names assigned to those interfaces:
pix-wan1, etc. Is it OK to use a CN of
pix-*.domain for a single certificate?
*.domain would work; but we've found that using a single wild-carded certificate enterprise wide requires the simultaneous replacement of certificates on far too many machines.