It's simple, just give a wildcard domain as the `-d` parameter.
Pass both the apex domain and the wildcard domain as `-d` arguments, and pass the DNS API identifier (e.g. `dns_cf` for Cloudflare, `dns_dgon` for DigitalOcean - find more [in the wiki](https://github.com/acmesh-official/acme.sh/wiki/dnsapi)) after the `--dns` argument.