Anyone know wh wildcard SSL Certs only work on the first level of domain names?

Case in point - http://www.pinterest.onelogin.com