Let's Encrypt with sub-subdomain?

I think I’m running into the problem discussed here: