I have superstash.co and *.superstash.co domains added to 2 different apps, and they share the “_acme-challenge” CNAME record name so I have to choose one to set in my DNS settings.
Once one of them expires, I have to go and switch to the next one etc.
This is very tedious and time-consuming.
I wonder why the *. wildcard doesn’t get an acme alias like standard subdomains do.
For the top-level domain - superstash.co - have you tried adding both and A record pointing to the IPV4 and an AAAA record pointing to the IPV6 for your app? That should be enough to validate your certificate automatically (using ALPN)
Then you can use the _acme-challenge record for the wildcard certificate.