Comment by dijit

I'm not exaggerating.

Development servers are absolutely not held to the same levels of scrutiny as our payment card processing servers.

Not using letsencrypt due to other regulation is perfectly valid- but using wildcard certificates has a strong potential to cause more harm than simply using another SSL provider.