In reply to Ryan Hellyer.

A wildcard certificate only covers the first level subdomain *.foo.com. If you have a bunch of sub-subdomains, then you need a second wildcard to support those: *.*.foo.com.