Wildcard certificates can simplify deployment across many subdomains, but they
also present a higher security risk because a single compromised private key
affects all subdomains. Therefore, we recommend using standard multi-SAN
certificates wherever possible, or carefully restricting access to wildcard
private keys.