Multi-Tenant SaaS's Wildcard TLS: An Overview of DNS-01 Challenges (skeptrune.com)

Standard automation of certificate renewal best practices. But I’m not sure I’d slot all of my customers under one wildcard cert. particularly if you are doing dedicated tenant SaaS architecture.