@Test public void wildcardsDoesNotNeedTwoDots() throws Exception {
        // openssl req -x509 -nodes -days 36500 -subj '/CN=*.com' -newkey rsa:512 -out cert.pem
        SSLSession session = session(""
                + "-----BEGIN CERTIFICATE-----\n"
                + "MIIBjDCCATagAwIBAgIJAOVulXCSu6HuMA0GCSqGSIb3DQEBBQUAMBAxDjAMBgNV\n"
                + "BAMUBSouY29tMCAXDTEwMTIyMDE2NDkzOFoYDzIxMTAxMTI2MTY0OTM4WjAQMQ4w\n"
                + "DAYDVQQDFAUqLmNvbTBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDJd8xqni+h7Iaz\n"
                + "ypItivs9kPuiJUqVz+SuJ1C05SFc3PmlRCvwSIfhyD67fHcbMdl+A/LrIjhhKZJe\n"
                + "1joO0+pFAgMBAAGjcTBvMB0GA1UdDgQWBBS4Iuzf5w8JdCp+EtBfdFNudf6+YzBA\n"
                + "BgNVHSMEOTA3gBS4Iuzf5w8JdCp+EtBfdFNudf6+Y6EUpBIwEDEOMAwGA1UEAxQF\n"
                + "Ki5jb22CCQDlbpVwkruh7jAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA0EA\n"
                + "U6LFxmZr31lFyis2/T68PpjAppc0DpNQuA2m/Y7oTHBDi55Fw6HVHCw3lucuWZ5d\n"
                + "qUYo4ES548JdpQtcLrW2sA==\n"
                + "-----END CERTIFICATE-----");
        // Android-changed: Ignore common name in hostname verification. http://b/70278814
        // assertTrue(verifier.verify("google.com", session));
        X509Certificate[] certs = {};
        assertFalse(verifier.verify(certs, "google.com", session));
    }
Earlier implementations of Android's hostname verifier required that
wildcard names wouldn't match "*.com" or similar. This was a nonstandard
check that we've since dropped. It is the CA's responsibility to not hand
out certificates that match so broadly.
common/src/test/java/org/conscrypt/HostnameVerifierTest.java