Can we use wildcard certificates for --tls_server_certs=?

Yes I believe osquery will validate wildcard certs. You could try asking in #tls if you think this may not be the case.