Wildcard matching of certificates