Guidance on certs and subdomain names

@samjsharpe comments please?