You don't need a wildcard for domain.com + www.domain.com. I've got several cheap (~$7) certificates that have both listed