Wildcard certs were somewhat useful for hiding this. Not sure that's still true.