Multi-domain certs (SAN certificates) let you share one certificate across multiple subdomains, reducing Let's Encrypt rate limit consumption. DNS-01 challenge is required for wildcard domains.