Yes in the literal sense you could have certificates like: *.internal.example.com *.external.example.com But no in the sense that you were asking

Yes in the literal sense you could have certificates like: *.internal.example.com *.external.example.com But no in the sense that you were asking, where you'd want to register certificate for multi-level wildcard: *.*.example.com