Issue a wildcard certificate with a DNS challenge

certbot certonly --dns-cloudflare 
  --dns-cloudflare-credentials /etc/letsencrypt/cf.ini 
  --dns-cloudflare-propagation-seconds 30 
  -d 'example.com' -d '*.example.com'