Do not permit multi-component wildcards on certificate names (OpenSSL, EXPERIMENTAL_C...