Don't check for CN *.appinf.com or secure.appinf.com, check for a CN including ".appinf.com" instead.