Update notes for submitted changes

* Allow single-wildcard SSL common name matching