Help with wildcard setup

It may be easier to change the server name from
pfsense.ad.marcuse.net.au
(which is NOT covered by the existing wildcard cert)
to something like:
pfsense-ad.marcuse.net.au
(which would be covered by the existing wildcard cert).