Dear Maintainer, With this certificate config file: [main] certificate = /etc/ssl/lacme/main.pem certificate-chain = /etc/ssl/lacme/main-fullchain.pem certificate-key = /etc/ssl/lacme/main.key subject = /CN=host.domainA.example subjectAltName = DNS:*.domainB.example owner = root:ssl-cert notify = /usr/bin/systemctl reload nginx And this command: lacme newOrder lacme complains: [main] Warning: Ignoring invalid domain *.domainB.example (Domain names changed for privacy.) I am not sure what would need to happen to support wildcard certs, but I would very much enjoy having that support. Thanks, -sam P.S.: I am sorry that I am reporting from a somewhat old Ubuntu system. I looked in your git repo and the same behavior seems to be present in the latest version of lacme.