> Either you use LetsEncrypt which automates the pain away anyway or you do the sane thing and buy a wildcard cert

For what it's worth, Let's Encrypt plans to offer wildcard certs starting in January 2018.