Support wildcard certificates

Add an option (which then will be the only way) to generate one certificate path for all subdomains.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information