Wildcats certs are also better for simple privacy by not exposing the other alternative names. In addition, you can have only port 443 open.