Domains & wildcards

When you add a domain you enter the exact hostnames the cert should cover — fully-qualified names, not a vague notion of "that domain".

Wildcards

*.example.com covers one level of subdomain (e.g. app.example.com, api.example.com) but not the bare example.com or two-level subdomains.

Ownership validation (DNS-01)

NOLAPSE uses the DNS-01 challenge — you set one TXT record and the system can renew forever without opening port 80 or touching DNS again. Ideal for wildcards and machines behind a firewall.