Comment by metadat

One great aspect of this is getting HTTPS for free, without your specific subdomain being leaked to the world through the Certificate Transparency (CT) Log.

https://letsencrypt.org/docs/ct-logs/

Apparently wildcards have been supported since 2018, but I only discovered this last weekend.

Cheers.