Tor project dislikes even eff's SSL certificate for having a wild card domain (*.eff.org).

There's more information: https://blog.torproject.org/blog/detecting-certificate-autho...