I would welcome key usage constraints to limit a wildcard cert to https only. But yeah I do hope you're right. I'll switch my domain off self-signing the momen

I would welcome key usage constraints to limit a wildcard cert to https only. But yeah I do hope you're right. I'll switch my domain off self-signing the moment a trusted CA offers a free wildcard cert with elliptic curve signing.