http://www.hanselman.com/blog/SomeTroubleWithWildcardSSLCertificatesFireFoxAndRFC2818.aspx
Helpful article that explains some SSL errors with wildcard certificates which according to RFC2818 only go one level deep. So *.blah.com is good for foo.blah.com but not bar.foo.blah.com. Weird.
