To get a wildcard SSL certificate from LetsEncrypt you need to run certbot version 0.22 or later according to https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578
I've installed certbot from apt using
sudo apt-get install certbot
However, that reports:
certbot is already the newest version (0.17.0-2).
How can I upgrade certbot to a version that supports wildcard certificates?
If you have already installed Certbot, you should add a parameter to apt-get install to upgrade only a specific package
Check version number
As the certbot site indicates, the certbot team maintains a PPA. The
certbot
package is at 0.22.2 on all supported versions of Ubuntu in that PPA. (What are PPAs and how do I use them?)Check version number:
(source)