*.site.com is literally that. IOW, if you use site.com, it will show as a bad certificate, but www.site.com or dev.site.com works fine. There are ways around it, but it is something to watch out for.
Also, be prepared to spend $$$