User blog comment:Brandon Rhea/How we're testing the fandom.com domain migration/@comment-31957572-20181015003106/@comment-47.149.75.131-20181019211812

They can easily get a https cert that covers wildcards, so no need for specific domain/sub domain cert.

Hell they can even get one for free from letsencrypt.