Does Java Keytool allow SAN values to have wildcarded DNS names
问题 According to RFC 2818 (section 3.1) RFC 2459 - It seems to be allowed to have a list of DNS name entries as part of SAN names and cover multiple domains: SubjectAlternativeName [ DNSName: localhost DNSName: *.i.mydomain.net DNSName: *.mydomain.net ] Using Java keytool application - it doesn't seem to allow SAN entries to have wildcards in DNS names. Does anyone know whether I can use some tricks(!) to do this? 回答1: I've run into this problem in the past and worked around it by using OpenSSL