So how do you get this ?

Let's Encrypt can issue wildcard certs too