Wildcard certs with (almost) any DNS host

Oh man, this how-to is super!