[moehm]

You can host it under a subdomain secret.example.com and have a single wildcard cert for *.example.com.

You can't hide that example.com exists, but you can hide all subdomains for that domain.