[openssl-users] Wildcard: how are they correct?

[Walter H.]

Hello,

which of these possibilities is the correct one?

(a)  CN=*.example.com
     and subjectAltName = DNS:*.example.com, DNS:example.com

(b)  CN=example.com
     and subjectAltName = DNS:example.com, DNS:*.example.com

(c)  CN=example.com
     and subjectAltName = DNS:*.example.com, DNS:example.com

(d)  CN=hello world
     and subjectAltName = DNS:example.com, DNS:*.example.com

Thanks,
Walter