[r1ch]

You can do subdomains, but with only class 1 verification you are limited to one subdomain per cert and the root domain is also included.