It’s worth stating that in most cases a wildcard isn’t needed (or preferable) and it’s often very simple to just request a certificate with multiple SAN entries (using the certbot client you could just add multiple -d entries: -d stage.mycompanyname.com -d preprod.mycompanyname.com -d qa-stage.mycompanyname.com).