Enabling SSL for site collections

Hi There,

I have few a web app as the below (pic1) and site collection( pic2). the site collections are made using HNSC. I am not able to get SSL working. I am not sure what I am doing wrong. how do I get a proper certificate request? will the wildcard certs apply to multiple domains? 

IE if we get a domain.ca as a wildcard, will that allow *.sp.domain.ca as a wildcard as well? or do we have to request a different kind of cert? 

Or anyone can shred some knowledge on how to get the SSL working on this sites?

much Appreciated.

Sham