Can I specify CN as just
* for server with dynamic IP from DHCP and no domain name? The point is that address of server is unknown and it's dynamic. Clients search for server in broadcast domain using broadcasts and then they need to connect over DTLS and verify server using certificate signed by internal CA.
This system design is fixed I'm not decisive person. I'm just asking about way to create certificate accepted by OpenSSL library in DTLS, without explicitly specifying address of server. Blind guess was to just use
* as CA but I started to worry if OpenSSL is gonna accept such cert.