http://bugs.winehq.org/show_bug.cgi?id=22709
--- Comment #3 from Night Nord NightNord@gmail.com 2010-05-16 06:31:54 --- You're speaking about native crypt32/winhttp now, right?
But it seems, that wget/curl/openssl/mozilla/opera/and dozens other software take this certificate as valid.
Also: http://en.wikipedia.org/wiki/Wildcard_DNS_record