Assume there are two servers; server1.com
has a standard SSL certificate installed and server2.com
has a wildcard SSL certificate (*.server2.com) installed.
Next, assume you make from server 1 via SSL connection an API call to api2.server2.com
...
If someone eavesdrops on the connection, which URL of server2 would the sniffer see?
Would the sniffer see server2.com
or the subdomain that was called api2.server2.com
?