Lets Encrypt ACME Challenge for Wildcard Certificate

You need access to the DNS and be able to create txt records.

certbot certonly --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory --manual-public-ip-logging-ok -d '*.hg-system.com' -d hg-system.com

Change hg-system.com to your Domain Name…

Create the txt Record in your DNS.

Type	TXT
Name	_acme-challenge
Value	the command shows above

Note that you need to change the acme record 2x times!