apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: pwa.example.com
  namespace: default
spec:
  secretName: pwa.example.com
  issuerRef:
    name: letsencrypt-prod-wild
    kind: ClusterIssuer
    group: cert-manager.io
  commonName: "*.pwa.example.com"
  dnsNames:
    - "pwa.example.com"
    - "*.pwa.example.com"