title: Self Signed Wildcard SSL in Firefox
body: <p>I've got something weird going on with Firefox. I'm working on a web application which is hosted on multiple endpoints. I've created self signed certificates for those endpoints using Powershell, which are all signed by the same (also self signed) root CA.</p>
  
  <p>In order to trust the certs I've tried a couple of things: </p>
  
  <ul>
  <li>Exceptions in FF</li>
  <li>Adding them to the cert store of Windows and setting 'security.enterprise_roots.enabled'</li>
  <li>Creating a custom config using CCK2 and adding the root cert in there</li>
  </ul>
  
  <p>When I browse the site using Firefox, the main URL works. But stuff that's being loaded from dynamically generated URLs (the why of this is not relevant) does not work. I'm getting SEC_ERROR_UNKNOWN_ISSUER error for those URLs. The only difference is that the main URL is a normal cert, the dynamically genated URL's are using a wildcard cert. </p>
  
  <p>The cert chains are as follows: </p>
  
  <ul>
  <li>Self Signed Root Cert
  
  <ul>
  <li>main.domain.com (works)</li>
  <li>*.apps.domain.com (does not work)</li>
  </ul></li>
  </ul>
  
  <p>So getting a page from main.domain.com works fine, no validation issues. Getting something from 1234.apps.domain.com does not work with a SEC_ERROR_UNKNOWN_ISSUER in return which I find very weird as it's the same issuer. Any ideas?</p>