I'm working with the registry for .wiki, a new generic top level domain set for public availability in June 2014. We're going to be giving away hosted wikis to registrants of .wiki domains and I'd like to use only https across the board on these wikis.
Purchasing an ssl cert for each second level domain is cost prohibitive and I see from Can a wildcard SSL certificate be issued for a second level domain? that web browsers reject *.tld certs.
We control the nameservers and webservers for all the .wikis we host and prepared for legwork if need be (e.g., convincing browser manufacturers to support a *.wiki cert).
What mechanisms can you think of that would allow us to inexpensively offer https across a wide swath of the *.wiki space?