Wildcard cert request renders "Incorrect TXT record" error

One is for the base domain and one is for the wildcard (which isn't required by industry rules, but is required by Let's Encrypt's current architecture). This is being discussed at