In that case, just don’t ask cert for www and request cert only for that domain, your client won’t be able to connect by www version anyway without A record, nor LE verification agent.
In that case, just don’t ask cert for www and request cert only for that domain, your client won’t be able to connect by www version anyway without A record, nor LE verification agent.