https://bonina.eu/web/wildcard-certificates-canonical-domain-and-subdomains/
Wildcard certificates using Let’s Encrypt/Certbot - canonical domain and subdomains