check that wildcard certificates have no wildcard inside public suffix - WIP