For root certain? But you can add your own self signed certs for domains an they can be wildcards.

You only need a root if you're issuing other keys.