3 ms·

This thread [0] suggests that you do. 0. https://www.reddit.com/r/programming/comments/84607r/lets_encrypt_releases_support_for_wildcard/dvn98d9/?st=jeq8o34j&s

• schoen 9y ago
  Yes, for an unattended renewal you'll need a way of programmatically creating TXT records. (Note that the validation follows CNAMEs, so the records you create don't have to be in your main DNS zone.)