Hi, Sergey.
Thank you for reaching out, I will be happy to assist you.
The Wildcard certificates we offer can secure any level sub-domain that you need. Unfortunately, though, it will only secure that level.
So, if you generate an order for *.sub.domain.com, it will secure admin.sub.domain.com, example.sub.domain.com, sub2.sub.domain.com, but it will not secure domain.com, sub1.sub2.sub.domain.com, example.domain.com, etc.
The level that you generate the wildcard for is the level that is being secured.
If you need any further assistance, please let me know.
Thank you!
p.s. я не через PS настраивал, а через GUI и, если память не изменяет, игрался с шифрованием и оно так и не завелось.