What is the domain validation process like (this is a process we will have to pass on to our customers) Do you support Let’s Encrypt-style HTTP validation for subdomains?

If you bring your own certificate (wildcard or not), we would have to manually upgrade the certificate for you. If this is something you plan to do regularly, then we will work on automating that process. It is just such a low occurence for us at the moment that we can easily handle the requests manually.