When you put a point in square brackets, it loses its special meaning and simply corresponds to a literal point. The easiest way to match any character in ASP RegularExpressionValidator:
^[\s\S]{2,40}$
[\s\S] - JavaScript , ( JS DOTALL s-mode, ). .NET, , , .