Comment by bkor

Wildcard domains aren't supported by Let's Encrypt last I checked.

StartCom provided GNOME with a free account which can create certificates (including the wildcard ones and so on). Those are pretty much mandatory in certain cases (secure Bugzilla attachment hosting).