One thing to know for @paulehoffman is that the DNS validation method is not supported by certbot --nginx (which only supports the HTTP validation method). So, the consequence is that you can't get wildcard certificates using certbot --nginx at all.
2 Likes