For SSL certs, if the domain DNS isn't pointed yet, will they automatically verify once it is?

We do generate certificates when the DNS gets set. CNAMEs work perfectly if your end users are doing those. Apex domains need both an A and AAAA record before we’ll issue the certificate.