I am happy to back working as a Devops using AWS. In my new job at https://www.dragontail.com/ I need to automatically produce wildcard certificates from certbot. The instructions at the link seem really good. Wish me luck!
Unfortunately there was little clear documentation for configuring all this unless you were an expert magician trained in the magic that is Linux system administration and the black magic that is networking and DNS.