> The problem is that letsencrypt does not offer url based authentification for wildcard certs.

For good reason though. You shouldn't be able to get a cert for a domain you cannot prove you control. Lots of people have webserver access to a specific domain but not all subdomains.