certbot_wildcard.sh

certbot certonly --manual --preferred-challenges dns -d '*.domain.com' -d domain.com

# Will have to add 2 DNS records in separate steps.
# Verify records are there.
nslookup -q=txt _acme-challenge.domain.com
dig -t txt _acme-challenge.domain.com +short

# Place files, if needed.
# Restart webserver.

# Inspect updated cert.
echo | openssl s_client -servername domain.com -connect domain.com 2>/dev/null | openssl x509 -noout -dates