use let's encrypt wild cartificate for *.bmj.com