Jasper Yu says to YSITD https://blog.gslin.org/archives/2018/02/28/8176/lets-encrypt-%E7%9A%84-wildcard-certificate-%E5%B0%87%E6%9C%83%E5%86%8D%E5%BB%B6/