2 https://blog.blaisot.org/letsencrypt-wildcard-part2.html
via https://arstechnica.com/uncategorized/2018/03/lets-encrypt-takes-free-wildcard-certificates-live/