`i` should start with `1`. In dns alias mode, the fulldomain doesn't have a `_acme-challenge` prefix.