Why Caddy Will Not Issue a Wildcard Certificate with the Normal HTTP Challenge
Wildcard ACME certificates require DNS validation of the parent zone.
ACME
Caddy Automatic HTTPS Cannot Fix a Port 80/443 Ownership Problem
ACME automation still depends on the challenge traffic reaching the Caddy instance that requested the certificate.