One thing to note is that Synology NAS only supports wildcards when using subdomains of its ddns domain in the PSL. In this case it is a custom domain name.
Perhaps using a different ACME client could work but I don't know Synology well enough to say. Thought it worth pointing out anyway
Look for section that includes this:
- Wildcard certificates are only supported for Synology DDNS.