Do not permit multi-component wildcards on certificate names (OpenSSL)