I slightly disagree with the author. Wildcard certs are widely misused, but sometimes they are useful. If a site like Tumblr contacted the LE servers each tim

I slightly disagree with the author. Wildcard certs are widely misused, but sometimes they are useful. If a site like Tumblr contacted the LE servers each time someone starts up a blog, the LE servers would most likely go belly up way to fast. Per-user subdomains don't scale well if you are using LE. I think there might be a solution somewhere in the middle, a hybrid-wildcard so to speak. Possibly allowing sites to get a wildcard cert that acts more like a CA, so that the site owner can provision a cert per user...