Comment by jpobst

The solution that we use for this is to have a separate domain for dev with its own wildcard certificate, like company-dev.net.