They don't implement it properly. "Wildcard" to them is *.parent.com, but for ..parent.com (i.e. www.blog.parent.com) they demand you get a "premium" certificate. And they don't let you implement it through auto-ssl in cPanel, citing "buggy" auto-ssl...