Wget does not accept SAN when checking the certificate.
host@host:~$ wget -O /dev/null "https://domain.com"; --2012-01-17 00:33:58-- https://domain.com Løser kypto.dk... 62.141.46.191 Connecting to domain.com|127.0.10.10|:443... forbundet. ERROR: certificate common name `*.domain.com' doesn't match requested host name `domain.com'. To connect to domain.com insecurely, use `--no-check-certificate'. Although the certificate includes in SAN (alternative names): *.domain.com domain.com
