Comment by PokestarFan

You can get around this by grabbing a wildcard certificate and then using a hard-to-guess subdomain.