Shouldn't this be a trusted certificate considering it's a wildcard SSL certificate?
That is, shouldn't
*.delaware.gov cover www.corp.delaware.gov?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
The wildcard replaces only one part of the hostname, e.g. *.delaware.gov covers www.delaware.gov or corp.delaware.gov but not www.corp.delavware.gov. From RFC2818, section 3.1:
...Names may contain the wildcard character
*which is considered to match any single domain name component or component fragment. E.g.,