Wildcard cert is possible to use but not recommended. Please check doc: Certificate Management --> Updating apache cert.

Updating apache certificates doesnt specifically talk about Wildcard certificates. We followed the Apache Certificate specifications but we are still getting the same error: "Unable to communicate securely with peer: requested domain name does not match the server’s certificate." Could you shed some more light on this?

Guys, this is standard apache web server stuff. There are a literally a million google articles about how to configure Apache 2 web server for any kind of cert. I'm closing this issue because it is not the kind of thing Gluu Support should be helping with.

Gluu has actually posted a solution regarding this on the community page and we have dowloaded the new war file provided in the link. https://support.gluu.org/access-management/9297/unable-to-add-new-client-only-protected-ressource-are-allowed/ Gluu server was throwing an error "Only protected ressource are allowed. please use https" on the oxTrust UI >> OpenID Connect >> Clients when we were trying to add an Open ID Connect client. The above link is the solution for it. Sharing this in case someone else faces this issue