Hacker News Reader

That's technically possible, but you'll have a very hard time finding a CA that's willing to issue a crazy cert like that.

It's most likely internal, you run your own org ca.

It's easy to do once you have a good relationship with your CA.

You can also self-sign for internal machines, and leave your public ones one wildcard deep.