Comment by Mike Scott on Let's Encrypt certificate to cover both wildcard subdomains and root-domain

The FAQ says it should work: “Note: on the verification screen you will see that the same DNS text records should be created with two different values - this is normal and this is how you should create them.”. So I’d raise a support ticket with zerossl.