I'd assume it uses a single wildcard certificate.
Yes, thats exactly how it works for the multiple subdomains.
alt Hacker News
Yes, thats exactly how it works for the multiple subdomains.