Why does my AWS certificate fail to validate?

Question

I have a subdomain like internal.bar.qux.example.com and I want to create a certificate for the wildcard *.internal.bar.qux.example.com.

However