Certbot plugins based on Lexicon require version 2.2.1+ for full functionality. With older versions of Lexicon, Certbot plugins based on Lexicon will fail to obtain a single certificate for a wildcard and the base domain (e.g. *.example.org and example.org). Future versions of these plugins will require 2.2.1+ now that it has been released.
When creating the python-dns-lexicon package, I forgot to add it to release-monitoring.org. I have since remedied this, and the update to 2.2.1 is now being tracked in #1560755. Thanks for bringing it to my attention! *** This bug has been marked as a duplicate of bug 1560755 ***