support for wildcards in alt names

checkssl

@@ -385,11 +385,17 @@ while IFS= read -r LINE; do
       if [[ -z $CERTINFO ]]; then
         PROBLEMS=$(echo "${PROBLEMS}- no certificate found")
       else
-        ALT_NAMES=$(echo "$CERTINFO" | openssl x509 -noout -text 2>/dev/null| grep "Subject Alternative Name" -A2 |grep -Eo "DNS:[a-zA-Z 0-9.-]*" | cut -c 5-)
+        ALT_NAMES=$(echo "$CERTINFO" | openssl x509 -noout -text 2>/dev/null| grep "Subject Alternative Name" -A2 |grep -Eo "DNS:[-a-zA-Z 0-9.*]*" | cut -c 5-)
         debug "ALT Names  $ALT_NAMES"
-        if [[ "$(echo "$ALT_NAMES" | grep "^${DOMAIN}")" == "${DOMAIN}" ]]; then
-          ISSUEDTO="${DOMAIN} (alt)"
-        else
+        ISSUEDTO=
+        for ALT_NAME in $ALT_NAMES; do
+          debug "check '$DOMAIN' == '$ALT_NAME'"
+          if [[ $DOMAIN == $ALT_NAME ]]; then
+            ISSUEDTO="${ALT_NAME} (alt)"
+          fi
+        done
+        if [ -z "$ISSUEDTO" ]; then
+          ISSUEDTO="-"
           PROBLEMS="${PROBLEMS}- possible name mismatch"
         fi
       fi