Arguably though wildcard certs are a bad hack on security, as it binds multiple distinct endpoints to a given keypair. Given the occasional implementation weak

Arguably though wildcard certs are a bad hack on security, as it binds multiple distinct endpoints to a given keypair. Given the occasional implementation weakness, and key recoveries, I would much rather bind only one key to a name.