Probably a rather odd question, but something that came to mind.
Wildcard certificates are about 10 times more expensive than a single certificate. However with a single certificate, you can secure sub-domains like secure.example.com ect...
My question is, what prevents me from simply buying a normal single certificate and then putting *.example.com in the CSR ? Is that even possible ? Or, do SSL venders have checks in place to know the difference between an actual sub-domain and a wildcard/* sub-domain.
I'd try myself but I already have all the SSL certs I need.