I do the same with my personal domain. Combined with a wildcard cert, all my internal services are on valid certificates with ease.