If you're generating that many subdomains (and you control the subdomains), it's probably worth investing in a traditional wildcard cert.

Though, it would be nice if the likes of dyndns names were given exception, since they are effectively second level tld's.