Wildcard issuance validation method(s)?

The authentication will be via DNS challenge, quoting Let Encrypt's announcement post: We will initially only support base domain validation via DNS for wildcard certificates, but may explore additional validation options over time.