Comment by andrewmunsell

The link indicates that because Let's Encrypt doesn't support wildcard certificates, they're using a self signed certificate