There are three options that I know of: 1) SNI -- this has just too poor support at this time 2) Separate ports -- you can make make Apache listen on for exam

There are three options that I know of: 1) SNI -- this has just too poor support at this time 2) Separate ports -- you can make make Apache listen on for example port 446 and use links like https://subdomain.foobar.com:446/... https://subdomain.foobar.com:446/.... -- however some corporate firewalls etc. may be blocking connections out on non-standard ports; we just that just for multiple testing environments. This still requires multiple certs or a wildcard cert. 3) Wildcard certs -- they are are usually quite bit more expensive but they'll let you register *.domain.com. So if a client wants a subdomain you can let them have client.yourdomain.com that way without multiple certs or IPs -- FogBugz uses that for example.