淘宝 NPM 镜像证书有问题？

➜ ~ curl -v https://registry.npm.taobao.com

• Server certificate:
• subject: C=CN; ST=ZheJiang; L=HangZhou; O=Alibaba (China) Technology Co., Ltd.; CN=*.taobao.com
• start date: Aug 5 03:07:02 2016 GMT
• expire date: Dec 14 10:39:30 2016 GMT
• subjectAltName does not match registry.npm.taobao.com
• SSL: no alternative certificate subject name matches target host name 'registry.npm.taobao.com'

在我这里(Arch Linux, Firefox 和 curl)，*.taobao.com 只能匹配二级域名，不能匹配三级的 registry.npm.taobao.com

https://security.stackexchange.com/questions/37887/why-arent-infinite-depth-wildcard-certificates-allowed 这里介绍了为什么通配符不能无限匹配