Comment by R.. GitHub STOP HELPING ICE on Do subdomains of a TLD with mandatory HTTPS require a wildcard certificate?

Wildcard certs are not expensive. You can get them for free, just like any certificate, from Lets Encrypt. You just have to use DNS-01 rather than HTTP-01 because the latter inherently cannot prove authority for the wildcard.