Here's a document on how to present the gateway with Multi-tenancy in mind, while presenting the gateway with a wild card cert.