title: Uploading wildcard SSL certificate for Google App Engine gives "The SSL certificate references subdomain outside of managed domain."
body: <p>I am currently using a self signed wildcard certificate (see <a href="http://pastie.org/8402240">http://pastie.org/8402240</a>) at our Google Apps domain. </p>
  
  <p>Lets say the domain is example.com. I have also registered the subdomains api.example.com and staging.example.com.</p>
  
  <p>The self signed certificate is for *.api.example.com.</p>
  
  <p>It works just fine.</p>
  
  <p>When I try to upload a CA signed certificate, however (see <a href="http://pastie.org/8402243">http://pastie.org/8402243</a>) I get the error message "The SSL certificate references subdomain outside of managed domain."</p>
  
  <p>The CA signed certificate is a bit more complex, but it parses as <a href="http://pastie.org/8402255">http://pastie.org/8402255</a>, and it too is for *.api.example.com (AND *.staging.example.com).</p>
  
  <p>What is wrong with the CA certificate to cause this error?</p>