$ certbot certonly --manual -d *.foo.bar -d foo.bar --server https://acme-v02.api.letsencrypt.org/directory --preferred-challenges dns

Then following the instruction add add TXT record on your domain DNS