I work with an application and the main site has a CA issued wildcard certificate for *.example.com.
We have several public facing subdomains eg app.example.com / cdn.example.com and several dev / qa environments eg. qa.example.com which are not available without being behind the corporate firewall.
Investigating a mixed content issue I was starting to talk to the network guys about trusted root certs and group policy for the dev boxes when I noticed that the main cert was a wildcard cert. Which leads me on to the question:
Are there any negative security implications by asking to have the public certificate imported onto the dev boxes?