I have a hosted zone in Route 53 that I’m trying to create certs for with AWS Certificate Manager. The validation process fails whether I do DNS or email validation for any subdomains other than the APEX or a wildcard subdomain like example.com and *.example.com.