Can the NetSuite Automatic certificate option secure a subdomain / third level domain like like ours at shop.iahe.com? Can this then be used as a Single Domain for Web Store and Checkout? Thank you!

Yes to both questions

Confirmed here too.