Windows Azure Multi-Tenant Application and SSL

Question

We are creating a multi-tenant ASP.NET MVC application that will be deployed onto Windows Azure. We will have some custom domain www.abc.com that will map to our given Windows Azure url abc.cloudapp.net. We are considering giving each tenant their own subdomain that will identify them on our application (tenant1.abc.com, tenant2.abc.com, tenant3.abc.com, etc) and then creating a CNAME record for each subdomain to map to abc.cloudapp.net. I have a few questions with this design.

1. Will a single wildcard SSL certificate for *.abc.com allow all the tenants to access the site over a secure connection?
2. Do we purchase the SSL certificate for *.abc.com or for abc.cloudapp.net?
3. Will the url that our ASP.NET MVC application sees be the tenant1.abc.com url or the abc.cloudapp.net url?

Thanks

Answer 1

1. Yes, one wildcard certificate should be all you need
2. You want it for *.abc.com
3. I'm less sure about this one, but I'm pretty sure it's tenant1.abc.com