Alright. I think all my subdomains are using the wildcard cert now. Used the command in this guide to have #LetsEncrypt generate it: https://www.bennadel.com/blog/3420-obtaining-a-wildcard-ssl-certificate-from-letsencrypt-using-the-dns-challenge.htm