You never need to buy another SSL certificate ever again, as Let's Encrypt now provides Wildcard certificates. So one certificate will work with all subdomains you control!