SSL and setup recommendation

We are setting up multi-user. Is it better to use subdomains or subdirectories? Also we are going to offer ecommerce, so what type of SSL recommendation do you have? Wildcard SSL, on a per site basis? etc…