[zanny]

And then letsencrypt gives out free certs, but not wildcards, though their argument is more for securities sake.