Yeah, looks like ACME is indeed free and includes wildcards: https://zerossl.com/letsencrypt-alternative/