You can get wildcard certs from Let's Encrypt, but in order to do so you have to use DNS challenges.