I'm hosting a SaaS application in Heroku and my service offers user groups a possibility to get their own subdomain address for the group.
Say, my service is www.example.com and a user group can get our_group_name.example.com as direct domain name for their group. This all works and HTTPS is possible as we have *.example.com wildcard certificate in use with Heroku's Endpoint SSL (in Cedar stack).
Now I want to add a possibility to get a totally custom domain for a group. For example www.our_group_name.com should point to the same app and work with HTTPS.
Heroku's endpoint SSL seems to allow only one certificate file, and it seems that it is not possible to combine wildcard certificates and UCC/SNA certificates. (In other words it seems to be impossible to have *.example.com and www.our_group_name.com served in one certificate, and Heroku only allows one certificate per SSL Endpoint app (no SNI possibility)) Please correct me if I'm wrong in any of the two assumptions above.
The situation is almost exactly similar as here: https://groups.google.com/forum/?fromgroups=#!topic/heroku/oVa7A7jNUZI but currently Heroku has deprecated all other SSL options than Endpoint. The suggestion there to add a server instance as proxy is what I'm currently considering (with Apache Traffic Server), but that adds a bit of manual work and costs, so I wanted to ask if someone could suggest a better solution for this?