You can use a SAN cert to create a multi-level wildcard cert. The cert would be issued for:
example.com, *.example.com, *.*.example.com, *.*.*.example.com [...] example.com, *.example.com, *.*.example.com, *.*.*.example.com [...]