[samgranieri]

Just setup a wildcard cert, apply that to wherever, and you limit how much you expose your internal infra.