# SSL certificates

Only one level of subdomains:

[RFC2818](http://www.ietf.org/rfc/rfc2818.txt) states:

> If more than one identity of a given type is present in the certificate (e.g., more than one dNSName name, a match in any one of the set is considered acceptable.) Names may contain the wildcard character \* which is considered to match any single domain name component or component fragment. E.g., \*.a.com matches foo.a.com but not bar.foo.a.com. f\*.com matches foo.com but not bar.com.

{% embed url="<https://serverfault.com/questions/104160/wildcard-ssl-certificate-for-second-level-subdomain>" %}
