Comment by simonw

WordPress.com illustrates an interesting challenge in supporting SSL if you allow people to use subdomains on your service:

https://bestcrabrestaurantsinportland.wordpress.com/ works fine

https://www.bestcrabrestaurantsinportland.wordpress.com/ displays a certificate warning

Unfortunately I don't think there's a good solution for this. Humans are gonna www- things.