Surprisingly, I cannot find a simple explanation how to create a wildcard certificate and install it on multiple IIS sites, current and future. Many things in the documentation suggest this might be possible.