Wildcards are absolutely supported under RHEL 7. Like all wildcard certificates, they require the use of DNS validation. I’d recommend using acme.sh, both since it isn’t a tangled mess of dependencies the way certbot is, and because it has much better support for DNS providers’ APIs.